← Back to glossary

Authentication using multiple factor categories.

Definition

MFA requires at least two independent authentication factors from different categories: knowledge (something you know), possession (something you have), and inherence (something you are).

In plain English Authentication using multiple factor categories.

Why this matters

Why it matters: It mitigates credential-based attacks by adding a non-password factor that is harder to replicate remotely.

Example

Example: Password (knowledge) + FIDO2 hardware key (possession).