Multi-factor authentication, allow the user to access to application or website after presenting two or more pieces of evidence to authenticate
What is MFA?
Knowledge - something only the user knows
Possession - Something only the user has
Inherence - Something only the user is
Types of authentication mechanism
MFA checks the user's location to ensure Genuity of the user. If the user changes the location, the user has to provide additional parameters of authentication to get the access
Role of location in MFA
Examples of Authentication Types
- SMS Token
- Email Token
- Hardware Token
- Software Token
- Phone Authentication
- Biometric
- Social Login
- Security Question
Common type MFA for user
as per Microsoft - MFA can "prevent 99.9% of attacks on accounts"
MFA protects from unauthorized access and password compromise
Protects from phishing attacks
Protects from password theft
Benefit of MFA
Popular MFA Softwares
- Microsoft Authenticator
- Google Authenticator
- Okta MFA
- Cisco Duo Security
- RSA SecureID Access
Two-factor authentication (2FA) requires users to present 2 types of authentication
MFA requires users to present at least two ior more type of authentication
2FA is an MFA, but not all MFA are 2FA
Is MFA is very costly to deploy?