Authentication & Security

Two-Factor Authentication (2FA)

Authentication using exactly two factors — typically password plus a second verification (SMS code, app, hardware key).

Also known as: two-step verification

Two-factor authentication (2FA) is a specific case of multi-factor authentication (MFA) using exactly two factors. The terms are often used interchangeably, though technically MFA can include three or more factors.

For most consumer and B2B portals, 2FA is the practical standard. The strongest 2FA combines a password with a passkey or TOTP authenticator app (Google Authenticator, Authy, 1Password). SMS-based 2FA is acceptable but the weakest option due to SIM-swap vulnerability.