2FA
Technology & Computing abbreviation · Cybersecurity
| Stands for | Two-factor authentication |
|---|---|
| Categories | Technology & Computing |
2FA stands for Two-factor authentication, a cybersecurity abbreviation.
A login method that requires two different kinds of proof of identity, typically something you know (a password) plus something you have (a phone or security key) or something you are (a fingerprint). Even if a password is stolen, an attacker still needs the second factor.
Example: Turn on 2FA for your email account first, since it can reset every other password you have.
Usage notes
Common second factors, from weakest to strongest, are SMS codes, authenticator-app codes, push approvals and hardware security keys. SMS codes can be hijacked through SIM-swap fraud, so security agencies recommend phishing-resistant options such as FIDO2 keys and passkeys. Even so, a 2019 Google study found that SMS codes blocked all the automated bot takeovers it examined. 2FA is the most common form of multi-factor authentication, and some products call it two-step verification.
Related abbreviations
More cybersecurity abbreviations
- AAA – Authentication, authorization and accounting
- ABAC – Attribute-based access control
- ACL – Access control list
- AES – Advanced Encryption Standard
- APT – Advanced persistent threat
- ASLR – Address space layout randomization
- ATT&CK – Adversarial Tactics, Techniques, and Common Knowledge
- AV – Antivirus
- BEC – Business email compromise
- BYOD – Bring your own device
- C2 – Command and control
- CA – Certificate authority