What Is Two-Factor Authentication, and Which Type Should You Use?
The three categories of authentication factor Three columns showing something you know (a password or PIN), something you have (a phone, hardware key, or passkey), and something you are (a fingerprint or face). Two of the three are required to unlock the account. Text below explains that "two-factor" means two different categories, not two of the same. any two unlocks 1 Something you know • A password • A PIN • A recovery phrase • An answer to a security question Can be stolen, guessed, or reused 2 Something you have • Your phone (SMS, app, push) • A hardware security key • A passkey on your device • A code from an authenticator Requires possessing the device 3 Something you are • A fingerprint • Face recognitio...