MFA (Multi-Factor Authentication）

What is MFA (Multi-Factor Authentication)?

MFA, or Multi-Factor Authentication, is a security authentication method that uses multiple factors to enhance security. The term "MFA" is derived from the first letters of "Multi-Factor Authentication."

• Knowledge information includes credentials only known by the user, such as passwords, PIN codes, or secret questions (e.g., traditional password authentication).
• Possession information refers to items uniquely owned by the user, such as mobile phones or hardware tokens.
• Biometric information includes biological traits such as fingerprints, veins, facial recognition, voice, or other physical characteristics.

By utilizing multiple factors, MFA creates layered authentication, significantly strengthening security.

Purpose and Benefits of MFA

MFA emerged to address the limitations of traditional password authentication. Even strong passwords can still be exploited through leaks, allowing unauthorized access. Furthermore, many users use guessable passwords, increasing vulnerability to hacking.

In modern times, where hacking techniques are increasingly sophisticated, the necessity of MFA continues to grow. MFA offers heightened security compared to traditional password authentication, protecting against risks like unauthorized access and attacks.

Drawbacks of MFA

MFA’s primary disadvantage is the inconvenience for users during login processes for services or servers.

For instance, in commonly used two-factor authentication, users must enter a password and then input a verification code before logging in. This adds extra time and effort compared to password-only logins. In some cases, verification codes are sent to separate devices, causing inconvenience if the devices are not readily available.

MFA systems must balance security with user convenience to ensure a seamless authentication experience.

Examples of MFA Usage

• Bank ATM Withdrawals:
  To withdraw money from an ATM, the user inserts a cash card and inputs a PIN. The cash card represents possession information and the PIN represents knowledge information, making this an example of MFA.
• Web Login with SMS Verification:
  SMS verification involves using short messages as an additional authentication factor. For instance, logging into a web service may require entering a password (knowledge information) followed by a code sent via SMS to the user's mobile phone (possession information).
• Fingerprint Authentication on Laptops:
  Public institutions and enterprises often add fingerprint authentication to password authentication to protect sensitive information on laptops. In this scenario, the password is knowledge information, while the fingerprint is biometric information.

MFA is already widely adopted across many industries and institutions to enhance security.