When thinking about different ways to secure an account, the first thing we usually think of is passwords. While using a unique and complex password is important there is more that can be done to protect information. Multifactor Authentication (MFA) enhances login security by introducing an extra layer of verification beyond the standard password. MFA combines something you know (login credentials) with something you have (token) or something you are (biometrics).
Here are the types of MFA commonly used today:
- SMS or text-based authentication
- Sends a one-time passcode via text message to a separate device at log in.
- Push notification
- Asks users to verify the login attempt rather than providing a code.
- This method is slightly more secure than SMS as texts can be intercepted by cybercriminals.
- Access to a smart device is needed.
- Third Party Authenticator Apps
- Generates time-based passcodes which expire at preset intervals.
- Access to a smart device is needed.
- Physical Token
- Separate physical device that generates a time-based passcode. Examples of a physical token is a Hardware Token (Key Fob) or a USB Token.
- Biometrics
- Fingerprint
- Facial recognition
- Retinal scan