What is MFA and why is it more secure than password alone?

What is MFA and why is it more secure than password alone?

• A. MFA requires two or more authentication factors (something you know, have, or are), making compromise harder than a single password.
• B. MFA uses only a longer password.
• C. MFA is a single sign-on token.
• D. MFA replaces passwords with biometric scans only.

Answer: (A)

MFA means you must provide more than one authentication factor to prove who you are. These factors come from different categories: something you know (like a password), something you have (a phone, security token, or smart card), and something you are (biometric data such as a fingerprint). The security benefit is clear: even if one factor is compromised, an attacker would still need the other factors to gain access. A single password can be stolen or phished and used on its own, but with MFA, the second factor blocks access unless the attacker also has that second piece. That’s why simply using a longer password isn’t MFA—it’s still just one factor. A single sign‑on token isn’t necessarily MFA, and biometrics alone isn’t MFA if it’s the only factor used. MFA combines multiple factors, making compromise far harder because multiple independent pieces would have to be dealt with by an attacker.

MFA means you must provide more than one authentication factor to prove who you are. These factors come from different categories: something you know (like a password), something you have (a phone, security token, or smart card), and something you are (biometric data such as a fingerprint). The security benefit is clear: even if one factor is compromised, an attacker would still need the other factors to gain access. A single password can be stolen or phished and used on its own, but with MFA, the second factor blocks access unless the attacker also has that second piece.

That’s why simply using a longer password isn’t MFA—it’s still just one factor. A single sign‑on token isn’t necessarily MFA, and biometrics alone isn’t MFA if it’s the only factor used. MFA combines multiple factors, making compromise far harder because multiple independent pieces would have to be dealt with by an attacker.