# Multi-factor authentication

Concept · [Cloud, hosting and security](https://ecosystem.samcarlton.com/cloud)

Also called: MFA, 2FA, two-factor, two-factor authentication, two factor, two-step verification, authenticator app, verification code

A [sign-in](https://ecosystem.samcarlton.com/authentication) that asks for more than one kind of proof, drawn from something a person knows, something a person has and something a person is. With two proofs it is called two-factor authentication, or 2FA.

**For example:** A [founder](https://ecosystem.samcarlton.com/founder) types a [password](https://ecosystem.samcarlton.com/authentication) and then a six-digit code from a phone app. A thief who has only the password cannot sign in.

## Connects to (7)

- [Authentication](https://ecosystem.samcarlton.com/authentication): Checking that a person is who they say they are, usually with a login.
- [SSO](https://ecosystem.samcarlton.com/sso): Single sign-on.
- [Secrets](https://ecosystem.samcarlton.com/secrets): Passwords, API keys and other credentials that software needs to run.
- [SOC 2](https://ecosystem.samcarlton.com/soc-2): An examination of how a service company protects customer data.
- [1Password](https://ecosystem.samcarlton.com/1password): A password manager.
- [Twilio](https://ecosystem.samcarlton.com/twilio): A cloud service developers use to send and receive text messages, phone calls and email from their apps through an API.
- [Fractional CISO](https://ecosystem.samcarlton.com/fractional-ciso): A part-time security leader.

Map view: https://ecosystem.samcarlton.com/mfa