What is multi-factor authentication (MFA), and why is it more secure than single-factor authentication?

Question

Accepted Answer

Requiring two or more different types of verification factors from different categories (something you know, have, or are) to prove identity. Multi-factor authentication (MFA) requires users to provide two or more verification factors from different categories to prove their identity. The three standard categories are: something you know (password, PIN), something you have (security token, smartphone, smart card), and something you are (biometric - fingerprint, face, iris). MFA is more secure than single-factor authentication because even if one factor is compromised (such as a stolen password), an attacker still cannot gain access without the additional factor(s). This dramatically reduces the risk of unauthorized access.

Using multiple passwords for the same account would still represent single-factor authentication (multiple instances of something you know) rather than true multi-factor authentication, which requires factors from different categories. Logging in to multiple accounts simultaneously from the same device describes a session management behavior, not an authentication method - it has no bearing on how identity is verified. Using the same password across multiple services is password reuse, which is a dangerous security practice that increases vulnerability rather than enhancing security - if one service is breached, all accounts sharing that password are compromised.

MFA is one of the most important access control topics on the Fundamentals of Cybersecurity exam. Students should understand the three factor categories, common implementations (SMS codes, authenticator apps, hardware tokens, biometrics), the distinction between two-factor and multi-factor authentication, and why MFA significantly reduces the risk of account compromise even when passwords are stolen through phishing or data breaches.

DSST Fundamentals of Cybersecurity: Question of the Day

Get a free DSST Fundamentals of Cybersecurity question every day

Ready for the full DSST Fundamentals of Cybersecurity? Earn 3 college credits.