Two-Factor Authentication (2FA)

Two-factor authentication, or 2FA, requires two different kinds of proof before allowing someone to sign in. A common setup pairs a password with a code from an authenticator app or a security key. This can reduce the risk that a stolen password alone gives an attacker access to a website, hosting dashboard, or business account. Not every two-step process uses two distinct factors, and available methods vary in resistance to phishing. Businesses should also secure recovery options, maintain access for authorized staff, and remove access when roles change. 2FA is an account security control; an SSL or TLS certificate protects connections and serves a different purpose.