Moving Beyond Multifactor Authentication

Multi-factor authentication (MFA) is an authentication method that requires two or more factors to verify the user’s identity and grant access to a system, account or other online resource. Often, this is something you know, like a password, and something you have, such as a security code sent by SMS or push-based mobile app. These common implementations of MFA with passwords and codes have always had the critical vulnerability of someone intercepting that security code or getting it from the user via phishing.