2-FA

2-FA‏‎ or 2-Factor Authentication is a security process in which users provide two different authentication factors to verify themselves. This process is done to better protect both the user's credentials and the resources the user can access.

Overview

2-Factor Authentication is a method of confirming a user's claimed identity by utilizing a combination of two different factors: something they know, something they possess, or something they are. A good example of two-factor authentication is the withdrawing of money from an ATM; only the correct combination of a bank card (something the user possesses) and a PIN (something the user knows) allows the transaction to be carried out.

Types of 2-FA‏‎

There are three types of authentication factors used in 2-FA‏‎:

• Knowledge factors: Something the user knows (e.g., a password, PIN, or secret fact).
• Possession factors: Something the user has (e.g., an ID card, a security token, or a smartphone).
• Inherence factors: Something the user is (e.g., biometric characteristics, such as a fingerprint or voice pattern).

Implementation

The use of 2-FA‏‎ is on the rise due to increased security breaches and identity theft. Many organizations, both large and small, are implementing 2-FA to add an extra layer of security. It is commonly used in online banking, social networking sites, and email services.

Criticisms and Limitations

While 2-FA‏‎ provides a higher level of security than traditional passwords, it is not without its criticisms and limitations. Some users find it inconvenient to have to provide two forms of identification. Additionally, if a user loses access to their secondary factor (like a phone), they may be locked out of their account.

See Also

• Multi-factor authentication
• Security token
• Biometrics