What Is Two‑Factor Authentication (2FA) — and Why It Matters

How 2FA Works

1. Something you know – password or passphrase
2. Something you have/are – TOTP app, hardware key, or fingerprint

Deployment Tips

• Favor FIDO2 hardware keys for admin accounts.
• Enable push‑based authenticators for user convenience.
• Disable legacy SMS if possible.

Studies show 2FA blocks 99.9 % of automated credential attacks.