Multi-factor authentication (MFA) explained

What is multi-factor authentication?

Multi-factor authentication (MFA) can greatly enhance security while delivering a positive user experience. MFA is an authentication method in which a computer user is granted access only after successfully presenting two or more pieces of evidence, or factors, to an authentication mechanism.

Something user knows

Something user knows
Something user has

Something user knows
Something user has
Something user is

4x breaches

Breaches have quadrupled in last four years costing the global economy $2.1 trillion in 2019.

2+ factors

By requiring 2 or more factors for verification, MFA provides the strongest security.

$5.2M lost

The average company loses $5.2M annually in weak password-related accounts lockouts.

* The 2019 State of Password and Authentication Security Behaviors Report, Ponemon Report, 2019

Types of multi-factor authentication

You have probably used multi-factor authentication (MFA) before without realizing it. The bank has higher confidence because a wallet thief cannot drain your account unless they also know your PIN. MFA is a way for the service you use to authenticate your identity, by asking you to present two or more pieces of evidence (factors) during the login process.

Biometrics

Biometrics such as voice recognition or fingerprint scans.

Magnetic stripe cards

Cards that contain data such as identification numbers written on magnetic storage media. May include other security features such as an employee id card with a photo on the front.

Security keys

A hardware authenticator that provides physical proof that the user is present when they touch the key.

Security tokens/mobile devices

Hardware such as a USB device or mobile phone that generates time-synchronized tokens based on a shared key with an authentication service.

Challenge/response

Answers to challenge questions that may include personal information such as “Your favorite sport.” or “Your first car.”

Smart cards

Cards that have embedded computing capabilities that typically include authentication credentials such as public key certificates.

Multi-factor authentication
raises the bar for security

Experience multiple layers of protection

Users who are security savvy and want the highest levels of security for sensitive resources or transactions opt for multi-factor authentication as the barrier to entry is the most stringent. A user has to supply several pieces of information before gaining access to their accounts.

Protect high assurance transactions

For certain transactions, using strong single factor authentication may provide sufficient security. However for high assurance transactions, such as filling a prescription, or making a high dollar value transaction, a user may need to be verified more strongly. Multi-factor authentication with a PIN will strongly assure the identity of the user.

Ensure strong compliance

For organizations in regulated industries, there is a need to meet stringent compliance regulations and compliance regulations such as PCI and HIPAA. Using a multi-factor authentication approach with solutions that meet the highest levels of assurance, such as NIST Assurance Level 3 (AAL3) assures authorized access.

Get Started

Find the

right Yubikey

Take the quick Product Finder Quiz to find the right key for you or your business.

Let’s startLet’s start