Two-factor authentication

Authentication using two different factor types, such as a password and a device. Two passwords are not two factors; phishing resistance depends on the method.

Sources and review

Reviewed: 2026-10-14

• NIST Special Publication 800-63B

←Back to glossary