Two factor authentication
Two-Factor Authentication (2FA) is an optional layer of security which adds another level of protection to your account. This process combines something you have (a token or code) with something you know (a password). Two-factor authentication is more effective in securing account access than a password alone, making it more difficult for attackers to access your accounts since they become dynamic in nature. The two common methods of 2FA are as follows:
- Authentication App or Token: Generate a security code using a trusted app or security RSA token
- SMS Verification: Send a security code to the phone number linked to your account via an SMS text message
An example of two-factor authentication:
Most banks now have two-factor authentication available to their customers. A good example of network administration is to combine an RSA feature with Cisco TACACS or Radius to gain access for any network device. VPN users must be authenticated with 2FA to validate an identity.
Hardware tokens (in the form of key fobs or card readers) are difficult to maintain due to logistic support and tokens are also usually small and easily lost. 2FA makes life easier by utilizing mobile phone SMS technology.
Following is an image of an RSA Hardware Token: