Two-factor authentication (2FA)

Two-factor authentication is a form of multi-factor authentication that requires exactly two different types of proof, typically a password plus a code or approval from a phone.

2FA adds a second check after the password. The second factor might be a one-time code from an authenticator app, a push notification to approve, a physical security key or a code sent by text message. The terms 2FA and MFA are often used interchangeably, although MFA can include more than two factors.

Turning on 2FA is one of the simplest, highest-value steps an Alberta business can take. It protects email, banking, accounting software, domain registrars and social media accounts even if a password is stolen through phishing or a breach at another website.

Practical tip: start with your most important accounts: email, banking, payroll, your domain registrar and any administrator logins. Choose an authenticator app or security key over text messages where possible. Store backup recovery codes somewhere safe and record who holds them, so you are not locked out if a phone is lost or an employee leaves.