MFA & 2FA requires users of a website or application to use two or more forms of authentication in order to gain access. The information required is known only by the user (knowledge), something the user has (possession) and something only the user is (inherence).