What is the MFA?
The Multi-Factor Authentication is a security method used to verify the identity of a user when accessing an account or computer system. MFA requires the user to provide multiple authentication factors, instead of just a password, to enhance security.
It uses 3 major factors:
-Knowledge factor (Something You Know): This is what we know, usually a password or PIN. The user must provide an element of knowledge, which is a personal secret.
-Possession Factor (Something You Have): This is what we physically own. This could be a mobile phone, smart card, hardware token or other form of device. The user must have this element in their possession to authenticate.
-Inherence Factor (Something You Are): This is who we are, often based on biometric characteristics like fingerprints, facial recognition, retina of the eye, voice, etc. The user must provide biometric proof to authenticate.
ㅤ
ㅤ
MFA significantly increases security compared to using a simple password, because even if an attacker manages to discover or steal your password, they will not be able to access your account without also having access to the second factor (possession or inherence). This makes it much more difficult for hackers to compromise online accounts because they would need to have access to several different items to pass authentication.
MFA is commonly used in various applications including email accounts, online banking, social media, business systems, and many other online services to enhance account and data security.
ㅤ
How does MFA works?
First, when a user attempts to log in to an account or system that requires authentication, they must first provide their username or ID and password. This is traditional authentication based on something the user “knows”.
Second, after providing the username and password, the user must also provide a second factor (Possession or Inherence factor)
After the user provides the second factor, the system verifies its correctness. If the second factor is correct, the user is authorized to access the account or system.
0 Comments