Monitekijävarmistus

Monitekijävarmistus, often referred to as multi-factor authentication (MFA), is a security method that requires more than one form of verification to grant access to a user or system. Instead of relying solely on a password, MFA combines two or more distinct factors from different categories to confirm a user's identity. This significantly enhances security by making it much harder for unauthorized individuals to gain access, even if one of the factors is compromised.

The common categories of factors used in MFA are knowledge, possession, and inherence. Knowledge factors include things only the user knows, such as a password or a PIN. Possession factors are items the user possesses, like a mobile phone receiving a one-time code, a hardware security key, or a smart card. Inherence factors are unique biological traits of the user, such as a fingerprint, facial scan, or iris scan.

When a user attempts to log in, they will be prompted to provide evidence from at least two of these categories. For instance, a user might enter their password (knowledge) and then be asked to enter a code sent to their phone (possession). The combination of these independent factors creates a layered defense against cyber threats like phishing attacks and credential stuffing. MFA is widely adopted across various platforms and services, from online banking and email accounts to enterprise systems, to protect sensitive data and prevent unauthorized access.