A Woman Using a Secure Login Process with Two Layers of Security to Protect Her Data and Account Access.

Continuing with Cybersecurity Awareness Month, let's learn more about using multi-factor authentication.

Even with safe online habits, strong passwords can be compromised if an account or website is breached. Multi-factor authentication adds a powerful extra layer of security to your accounts by requiring a second proof of identity. If an unauthorized user steals your password, they won’t be able to meet the second verification step required to access your accounts.

What is Multi-Factor Authentication?

Multi-factor authentication (MFA) is a login security method that requires two or more forms of identity verification to access an account. One "factor" is usually your password. You can often choose the other verification factor, such as a: 

  • One-time code sent to your phone number or email address 
  • One-time code or approval generated in an authenticator app 
  • Fingerprint or facial scan (biometrics)
  • Physical security key 
  • Notification generated by your device 

MFA is also called two-factor authentication (2FA) or two-step verification. These terms all refer to the same idea: protect yourself with more than just a password.  

Easy Steps to Turn On MFA

Almost every account today contains personal data worth protecting. The Cybersecurity & Infrastructure Security Agency (CISA) recommends turning on MFA everywhere you can. 

Start with your most sensitive accounts, including email, financial accounts, healthcare accounts, social media, and more.

  1. Go to Account Settings.
    • Find your settings under your account profile. It may be called Account Settings, Profile, Preferences, Privacy, or similar. 
    • Select the security settings. This could be labeled Security, Password and Security, or similar.
  2. Turn on MFA. 
    • MFA may be called two-factor authentication, two-step authentication, or similar.
  3. Confirm your choice.
    • Select which MFA method to use from the options provided by each account or app. 
    • MFA options may include:
      • Receive a one-time code by text or email.
      • Use biometrics, such as facial recognition or fingerprints.
      • Pull a one-time code from an authenticator app. 

MFA is one of the simplest, most effective security steps you can take—whether you’re protecting your personal email or your financial accounts, turn on MFA to keep your data safe.

Helpful Videos and Resources

Additional resources about MFA include: