---
title: "Multi-Factor Authentication (MFA) — Definition & Engineering Context"
description: "Multi-Factor Authentication (MFA) is a security authentication process that requires a user to provide two or more verification factors to gain access to a resource, minimizing credential theft risk."
canonical: https://erpstack.io/glossary/mfa
markdown_url: https://erpstack.io/glossary/mfa.md
publisher: ERPStack
---

# Multi-Factor Authentication (MFA)

> **Definition:** Multi-Factor Authentication (MFA) is a security authentication process that requires a user to provide two or more verification factors to gain access to a resource, minimizing credential theft risk.

## In depth

MFA protects systems against compromised passwords. Verification factors include password credentials (something you know), phone SMS codes or authenticator apps (something you have), and biometric passkeys (something you are). Enforcing MFA is mandatory for SOC2, HIPAA, and federal systems.

## How ERPStack applies this

We integrate custom-grade MFA and biometric passkeys into our custom applications, protecting admin consoles and customer directories from account takeovers.

## Related reading

- [JWT Session Storage](https://erpstack.io/glossary/jwt)
- [Zero-Trust Security](https://erpstack.io/glossary/zero-trust)