---
title: Multi-factor Authentication | Guardsquare
description: Multi-factor authentication (MFA) is an authentication method that requires users to successfully present two or more pieces of evidence. Learn more.
---

[![guardsquare-logo](https://insights.guardsquare.com/hs-fs/hubfs/Logos/logo-white.png?length=536&name=logo-white.png "guardsquare-logo") ](https://23593082.hs-sites.com/)

- pricing

[Request Pricing](https://www.guardsquare.com/request-pricing?hsCtaTracking=646b0379-d596-4b1a-8526-2ccbdbb0f81b%7Ce8809087-a83f-4476-8b22-34b9572013fd)

[Login](https://customers.guardsquare.com/login?utm_referrer=https%3A%2F%2Fwww.guardsquare.com%2F)

En

- [中文](https://www.guardsquare.com/zh-hans)
- [한국어](https://www.guardsquare.com/ko)
- [Português](https://www.guardsquare.com/pt-br)
- [Español](https://www.guardsquare.com/es)

# [Mobile Application]

# Security Research Center

 Table of contents

# Multi-factor authentication

**Guardsquare recommended technique**

|   | **Technique summary** |
| --- | --- |
| **Technique** | Multi-factor authentication (MFA, sometimes 2FA) |
| **Against** | [Clipboard attack](https://23593082.hs-sites.com/knowledgebasetest/attacks/clipboard-attacks), [SMS attacks](https://23593082.hs-sites.com/knowledgebasetest/attacks/sms-attacks) |
| **Limitations** | None |
| **Side effects** | None |
| **Recommendations** | Recommended for use. |

Multi-factor authentication (MFA), or two-factor authentication (2FA) is an authentication method in which a user is granted access only after successfully presenting two or more pieces of evidence (or factors) to an authentication mechanism. For example, these two factors can be user's password and a one-time password generated with a third-party authenticator app.

A third-party authenticator (TPA) app enables two-factor authentication, usually by showing a randomly generated and frequently changing code to use for authentication.

To make the MFA resilient to [SMS attacks](https://23593082.hs-sites.com/knowledgebasetest/attacks/sms-attacks), none of the factors should be an SMS text received on the user's device.

Note that the TPA can still be vulnerable against other attacks, such as [Malicious accessibility services](https://23593082.hs-sites.com/knowledgebasetest/attacks/a11y-attacks).

## [Guardsquare](https://23593082.hs-sites.com/knowledgebasetest/author/guardsquare)

Connect with the author

** Table of contents **

![HubSpot CMS](https://cdn2.hubspot.net/hubfs/302335/hubspot-cms-logo-gray.svg "HubSpot CMS")

[General Terms](https://23593082.hs-sites.com/terms-of-use) | [Privacy Policy](https://23593082.hs-sites.com/privacy-policy) | [Cookie Policy](https://23593082.hs-sites.com/cookie-policy)

Tervuursevest 362 bus 1, 3000 Leuven, Belgium | VAT: BE0550675829 |

© 2016-2026 Guardsquare nv. All rights reserved.

<https://www.facebook.com/guardsquare> <https://twitter.com/Guardsquare> <https://www.linkedin.com/company/guardsquare/> <https://www.youtube.com/channel/UCP9s5F1ksT1E-7vSF2CDyhw> <https://github.com/Guardsquare>

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Guardsquare",
    "url" : "https://23593082.hs-sites.com/knowledgebasetest/author/guardsquare"
  },
  "dateModified" : "2024-02-28T02:01:50.081Z",
  "datePublished" : "2024-02-13T18:40:33.000Z",
  "headline" : "Multi-factor Authentication | Guardsquare",
  "mainEntityOfPage" : {
    "@id" : "https://23593082.hs-sites.com/knowledgebasetest/defense/mfa",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject"
    }
  }
}
```