Authentication

Proving an identity claim using something you know, have, are, or somewhere you are.

The four factor categories are something you know (password, PIN), have (token, smart card), are (biometric), and somewhere you are (location). Strong authentication combines different categories — two passwords are not MFA, because both are “something you know.” Phishing-resistant factors such as FIDO2/WebAuthn hardware keys are the current gold standard.

PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →

Related terms

Back to General Security Concepts