Two-Factor Authentication
Two-factor authentication (2FA) is a security measure that requires users to provide two forms of identification in order to access an account or system. The two forms of identification typically include something the user knows, such as a password or PIN, and something the user has, such as a physical token or a mobile device.
Types of Two-Factor Authentication
There are several types of two-factor authentication:
- Time-based One-Time Password (TOTP): This type of 2FA uses a software or hardware token that generates a unique password that is valid for a short period of time (usually 30 seconds). The user must enter the current password in addition to their regular password to authenticate.
- Short Message Service (SMS): This type of 2FA sends a unique code to the user's mobile device via text message. The user must enter the code in addition to their regular password to authenticate.
- Universal Second Factor (U2F): This type of 2FA uses a physical token (such as a USB key) that communicates with the user's device via Bluetooth or NFC. The user must have the physical token in addition to their regular password to authenticate.