IDENTITY

MFA

Requiring more than one proof of identity, something you know, have, or are, to sign in.

IN PRACTICE

Push-based MFA is widely bypassable via prompt bombing. Phishing-resistant MFA (FIDO2, passkeys) is what regulators and most security teams now recommend.

← Back to glossary