A login method that requires two or more different types of proof of identity, such as a password plus a code from your phone.
Multi-factor authentication (MFA) combines factors from different categories: something you know, like a password; something you have, like a phone or security key; and something you are, like a fingerprint. Two-factor authentication (2FA) is the most common form.
Even if attackers steal a password through phishing or a data breach, MFA makes it much harder for them to log in. Methods vary in strength. SMS codes are better than nothing but can be intercepted through SIM swapping. Authenticator apps are stronger, and hardware security keys and passkeys based on public-key cryptography offer strong protection against phishing. Attackers sometimes try MFA fatigue, sending repeated approval prompts until a tired user accepts one.
The process of verifying that a user, device, or system is who or what it claims to be.
BiometricsThe measurement of unique physical or behavioral traits, such as fingerprints or facial features, to identify or authenticate people.
Business Email CompromiseA scam in which criminals impersonate or take over a business email account to trick staff into sending money or sensitive data.
PasskeyA passwordless sign-in credential based on FIDO2 and WebAuthn that uses a cryptographic key pair stored on your device instead of a password.
Password ManagerAn app that securely stores and fills in passwords, so you can use a strong, unique password for every account without memorizing them.
PhishingA social engineering attack that uses fake emails, messages, or websites to trick people into revealing information or installing malware.
Single Sign-OnAn authentication method, known as SSO, that lets people log in once and access many applications without signing in to each separately.
Zero TrustA security model built on the principle never trust, always verify, requiring every user and device to be authenticated and authorized continuously.
CMMC is now in DoD contracts, and third-party Level 2 assessments start appearing November 10, 2026. Here's what each level requires and the first steps for small suppliers.
A buyer's checklist for AI meeting assistants covering recording consent laws, accuracy testing, integrations, data retention, security and cost.
How to get an entry-level IT job: the help desk and support roles to target, skills and certifications that matter, home lab projects that impress hiring managers and official BLS pay data.