Two-Factor Authentication

A Two-Factor Authentication (2FA) secures accounts by requiring two distinct verification methods. Users combine something they know, such as a password, with something they have, like a smartphone or hardware token. This approach, also called multi-factor authentication (MFA) when using more factors, blocks access even if a password leaks.

2FA works in steps. First, enter your username and password. The system then prompts for a second factor. Common methods generate a time-sensitive code using TOTP (Time-based One-Time Password) standards. Authenticator apps like Google Authenticator display these codes. Alternatives include SMS texts or push notifications to approved devices. Hardware security keys, such as YubiKey, confirm identity via USB or NFC.

In cryptocurrency, 2FA protects exchanges like Binance, wallets like MetaMask, and blockchain services. It thwarts phishing, where attackers steal passwords, and brute-force attacks. Without 2FA, a compromised password grants full account control, risking fund theft. Exchanges often mandate 2FA for withdrawals.

Key types include app-based (most secure), SMS (convenient but vulnerable to SIM-swapping), and biometric (fingerprint or face ID). Prefer non-SMS options. Enable 2FA everywhere possible, and use backup codes stored safely. Synonyms: 2FA, MFA, multi-factor authentication.