Lisatõendamise

Lisatõendamise, often translated as "additional verification" or "secondary authentication," refers to a security process that requires users to provide more than one piece of evidence to confirm their identity when accessing an account or system. This is a common practice designed to enhance security beyond a simple username and password, which can be vulnerable to compromise.

The principle behind lisatõendamine is based on multi-factor authentication (MFA). Instead of relying solely on something the user knows (like a password), lisatõendamine typically incorporates at least one other factor from different categories. These categories generally include something the user has (like a physical token, a mobile phone, or a smart card) or something the user is (biometric data such as a fingerprint or facial scan).

Common examples of lisatõendamine include receiving a one-time passcode (OTP) via SMS to a registered mobile phone, using an authenticator app that generates time-based one-time passcodes (TOTP), or employing a hardware security key that plugs into a device. Biometric authentication, such as fingerprint scanning on smartphones or facial recognition, also serves as a form of lisatõendamine.

Implementing lisatõendamine significantly reduces the risk of unauthorized access, even if a user's primary credentials are stolen. It adds an extra layer of defense, making it much more difficult for attackers to gain entry. This is why many online services, financial institutions, and corporate networks mandate or strongly recommend the use of lisatõendamine.