multi-factor authentication

This article is a stub. You can help the IndieWeb wiki by expanding it with relevant information.

multi-factor authentication (commonly two-factor authentication, abbreviated 2FA or TFA) is an authentication process that requires at least a second component to a standard authentication method. Typically the second component is something user possesses, like a TOTP application or a hardware key (often USB).

See Also

• SMS
• TOTP
• IndieAuth
• twofactorauth.org, comprehensive list of sites and whether they support 2FA, which kinds, etc.
• https://twitter.com/blaine/status/993462650389573632
  • "Observe Ben, a veteran and expert in security and online systems. He's thoughtful, considerate, and organized.
    
    Our collective best practice approach to security just threw him under the bus. We need to do better, because most people are much less able to deal with this than Ben." @blaine May 7, 2018
• Web Authentication
• andOTP is an open-source TOTP and HOTP application for Android that allows for encrypted backups of your key data.
• 2018年07月16日 How-To Geek: What To Do If You Lose Your Two-Factor Phone
• https://twitter.com/scalzi/status/1153754441562173440?s=20
  • "When two factor authentication goes wrong." @scalzi July 23, 2019
• ^^^ https://twitter.com/garetharnolduk/status/1153752623029346305
  • "So, just remembered he needs my phone to login to his Twitter. Shit. Sorry mate. Consider it payback for all the nonsense I said to people defending you." @garetharnolduk July 23, 2019
• https://paulstamatiou.com/getting-started-with-security-keys/
• https://twitter.com/sarasoueidan/status/1280105183821824000
  • "👆🏻 And that is why using SMS for 2FA sucks. Also, when you're traveling and are using a different SIM card, too." @SaraSoueidan July 6, 2020
• Common misconception(s): That’s not how 2FA works
• criticism: bad for usability https://twitter.com/jensimmons/status/1465755901231566858
  • "🧵on 2FA:
    "People who don’t have phones still need access to their email accounts."" @jensimmons November 30, 2021
• Wikipedia:Multi-factor_authentication

• stubs