multi-factor authentication

{
  "id": "MLC-T-CYB-002756",
  "term": "multi-factor authentication",
  "field": "Cybersecurity",
  "definition": "1. Authentication using two or more different factors to achieve authentication. Factors include something you know (e.g., PIN, password), something you have (e.g., cryptographic identification device, token), or something you are (e.g., biometric).\n\n2. Authentication using two or more factors to achieve authentication. Factors include: (i) something you know (e.g., password/personal identification number [PIN]); (ii) something you have (e.g., cryptographic identification device, token); or (iii) something you are (e.g., biometric).\n\n3. An entity that facilitates authentication of other entities attached to the same LAN using a public key certificate.\n\n4. Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity. This was previously referred to as a token.\n\n5. Authentication using two or more different factors to achieve authentication. Factors include something you know (e.g., PIN, password), something you have (e.g., cryptographic identification device, token), or something you are (e.g., biometric). See authenticator.\n\n6. See authenticator type and multi-factor authenticator.\n\n7. An authentication system that requires more than one distinct type of authentication factor for successful authentication. MFA can be performed using a multi-factor authenticator or by combining single-factor authenticators that provide different types of factors.\n\n8. Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity.\n\n9. A characteristic of an authentication system or an authenticator that requires more than one distinct authentication factor for successful authentication. MFA can be performed using a single authenticator that provides more than one factor or by a combination of authenticators that provide different factors.\nThe three authentication factors are something you know, something you have, and something you are.\n\n10. The means used to confirm the identity of a user, process, or device (e.g., user password or token).\n\n11. Authentication using two or more different factors to achieve authentication. Factors include something you know (e.g., PIN, password); something you have (e.g., cryptographic identification device, token); or something you are (e.g., biometric).\n\n12. An authentication system that requires more than one distinct authentication factor for successful authentication. Multifactor authentication can be performed using a multifactor authenticator or by a combination of authenticators that provide different factors. The three authentication factors are something you know, something you have, and something you are.\n\n13. Authentication using two or more factors to achieve authentication. Factors are (i) something you know (e.g., password/personal identification number); (ii) something you have (e.g., cryptographic identification device, token); and (iii) something you are (e.g., biometric).\n\n14. Authentication using two or more different factors to achieve authentication. Factors include something you know (e.g., PIN, password); something you have (e.g., cryptographic identification device, token); or something you are (e.g., biometric). See authenticator.\n\n15. Authentication using two or more different factors to achieve authentication. Factors include: (i) something you know (e.g., password/PIN); (ii) something you have (e.g., cryptographic identification device, token); or (iii) something you are (e.g., biometric). See Authenticator.\n\n16. Something that the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity. This was previously referred to as a token.\n\n17. An authentication system or an authenticator that requires more than one authentication factor for successful authentication. Multi-factor authentication can be performed using a single authenticator that provides more than one factor or by a combination of authenticators that provide different factors.\n\n18. The three authentication factors are something you know, something you have, and something you are. See authenticator.\n\n19. Authentication using two or more different factors to achieve authentication. Factors include something you know (e.g., PIN, password); something you have (e.g., cryptographic identification device, token); or something you are (e.g., biometric). See also Authenticator.",
  "abbreviation": "2FA",
  "synonyms": [
    "authenticator",
    "MFA"
  ],
  "see_also": [
    "authenticator"
  ],
  "references": [
    "NIST SP 800-172A [Superseded]",
    "NIST SP 1800-27B; NIST SP 1800-27C from CNSSI 4009-2015",
    "CNSSI 4009-2022",
    "NIST SP 800-171r3",
    "NIST SP 800-171r3; NIST SP 800-172 [Superseded]",
    "NIST SP 800-63-4",
    "NIST SP 800-63-4; NIST IR 8523 from NIST SP 800-63-4",
    "NIST IR 8523 from NIST SP 800-63-4",
    "CNSSI 4009-2022 from NIST SP 800-63-3",
    "CNSSI 4009-2015 from NIST SP 800-53 Rev. 4",
    "CNSSI 4009-2015 from NIST SP 800-53 Rev. 4; CNSSI 4009-2022 from NIST SP 800-171 Rev. 2 (adapted)",
    "NIST SP 1800-17b; NIST SP 1800-17c",
    "NIST SP 1800-12b",
    "NIST SP 800-171 Rev. 2 [Superseded]",
    "NIST SP 800-53 Rev. 4 [Superseded]",
    "NIST SP 800-53 Rev. 5",
    "NIST SP 800-53 Rev. 5 from NIST SP 800-63-3",
    "NIST SP 800-171 Rev. 1 [Superseded]",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/multi-factor-authentication/"
}