What is two-factor authentication (2FA)?

Two-factor authentication (2FA) is a security method that requires users to provide two different types of verification before gaining access to an account or system. It provides an additional layer of protection beyond a password.

The two factors generally come from categories such as:

• Something you know – A password or PIN.
• Something you have – A mobile phone, authentication app, or security key.
• Something you are – A biometric characteristic such as a fingerprint or facial recognition.

For example, when a B2B eCommerce administrator logs in, they may enter their password first and then provide a time-based code from an authentication app. Even if someone obtains the password, they may still be unable to access the account without the second factor.

2FA can help protect against stolen passwords, credential stuffing, phishing, and unauthorized account access. It is particularly useful for administrator, employee, and business customer accounts that can access sensitive information or perform important actions.

Businesses should encourage or require 2FA for accounts with sensitive permissions and provide secure recovery methods. While 2FA significantly improves account security, it does not eliminate every security risk.