Multi-Factor Authentication

A security system that requires more than one method of authentication from independent categories of credentials to certify the user’s identity

Authentication Factors

Knowledge-based Factor

Also known as Type 1 or “Something you Know” factor
Least Security, Cheapest Solution
e.g. Password, PIN

Possession-based Factor

Also known as Type 2 or “Something you Have” factor
e.g. Smart Card, Hardware Token (Key Fob), Software Token (OTP)

Inheritance-based Factor

Also known as Type 3 or “Something you Are” factor
High security, High Cost, Error Prone
Once compromised it cannot be replaced
e.g. Biometrics (Fingerprints, Facial, Iris Scan), Behavioral (Typing Style, Walking Style, Signature, Voice Recognition)

Location-based Factor

Also known as Type 4 or “Somewhere you Are” factor
e.g. IP Address Verification, GPS Tracking

Behaviour-based Factor

Also known as Type 5 or “Something you Do” factor
e.g. Keystroke Pattern, Mouse Movement

Passkeys

Users can create and access online accounts without needing to input a password
To log into a service the user must unlock their device using the authentication method they have set (e.g. biometrics)