Two-factor authentication

Updated: 09/10/2024 by Computer Hope
Two-factor authentication

Two-factor authentication (2FA) is a technique used to increase the level of security by adding a step or component to the user verification process. Essentially, it requires the user to undergo two successful authentications before access is granted. Each of the required modes of authentication is usually one of the following.

  • Something the user knows.
  • Something the user physically holds.
  • Something inseparable from the user's body.

Examples of two-factor authentication

While undergoing an ATM (Automated Teller Machine) transaction, the user must insert a bank card (something the user physically holds) and enter a password (something the user knows). These two factors together make it extremely unlikely that an unauthorized user is accessing the bank account. Other examples could be using a password and a fingerprint scan, or a password and a one-time password.

Online two-factor authentication

Many online services use two-factor authentication by sending a text message (SMS verification) to the user's phone with a unique code that must be entered if the computer is not recognized. This form of two-factor authentication prevents anyone without the phone from accessing an account and gives a significant boost to the level of security.

Some companies may also use a smartphone app, such as Google Authenticator, to generate random codes that verify the user without sending a text message.

How can I bypass 2FA?

Two-factor authentication or 2FA is not meant to be bypassed. If you've lost your 2FA method of accessing an account (e.g., Facebook) you have the following options.

  • Use the 2FA backup code provided when you created the 2FA. This code is a long series of letters and numbers that should have been saved into a file or printed out.
  • If available, use a recovery e-mail or phone number.
  • Contact support of the company your trying to access to verify your identity.

Unfortunately, if none of these options work or are not available, you cannot regain access to your account.

Biometric authentication, Computer acronyms, Key fob, MFA, One-time password, Password, Security terms, Security token, Two