MFA (Multi-Factor Authentication)

MFA (sometimes called 2FA) means a password alone isn't enough to access an account — you also need something else, typically a one-time code from an app, an SMS code, or approving a push notification on your phone. It's one of the single most effective controls against account takeover: even if a password is stolen or guessed, an attacker still can't get in without the second factor. It's a mandatory control under Cyber Essentials for cloud services and admin accounts.