Two-Factor Authentication
An authentication mechanism that adds a second verification factor beyond a password. Common forms include TOTP one-time codes, hardware security keys and push confirmations. It is primarily used to protect interactive login flows.
Timeline (last 90 days)
Two-factor authentication (2FA) requires a second verification factor (such as an SMS code or hardware key) in addition to a password when logging into an account, and can effectively reduce the risk of account theft.
Common forms of two-factor authentication include TOTP one-time passwords, hardware security keys (such as FIDO2/WebAuthn), and push confirmations.
2FA mainly protects interactive login flows and provides limited protection for long-lived tokens that have already been stolen and can be used directly for API calls.
The authentication factors in two-factor authentication fall into three categories: something you know, something you have, and something you are.
The authentication factors of two-factor authentication fall into three categories: something you know, something you have, and something you are; common implementations include TOTP, SMS verification codes, and hardware security keys (based on the FIDO2/WebAuthn standard).
All Facts (5)
Two-factor authentication (2FA) requires a second verification factor (such as an SMS code or hardware key) in addition to a password when logging into an account, and can effectively reduce the risk of account theft.
50%UnverifiedCommon forms of two-factor authentication include TOTP one-time passwords, hardware security keys (such as FIDO2/WebAuthn), and push confirmations.
50%Unverified2FA mainly protects interactive login flows and provides limited protection for long-lived tokens that have already been stolen and can be used directly for API calls.
50%UnverifiedThe authentication factors in two-factor authentication fall into three categories: something you know, something you have, and something you are.
50%UnverifiedThe authentication factors of two-factor authentication fall into three categories: something you know, something you have, and something you are; common implementations include TOTP, SMS verification codes, and hardware security keys (based on the FIDO2/WebAuthn standard).
50%