Multi-factor Authentication

Multi-factor authentication is a layered approach to securing data and applications where a system requires a user to present a combination of two or more credentials to verify a user’s identity for login. MFA increases security because even if one credential becomes compromised, unauthorized users will be unable to meet the second authentication requirement and will not be able to access the targeted physical space, computing device, network, or database.

Whether you call it two factor authentication, multifactor authentication, two step authentication, MFA, 2FA, or 2SV you are using a combination of something you have, something you know, or something you are when confirming you are who you say you are online.

As your bank, we want to make sure you are who you say you are, and—more importantly—we want to prevent unauthorized individuals from accessing your account and data.

So, we are taking a step to double check. Instead of asking you just for something you know (e.g., a password)—which can be reused, more easily cracked, or stolen—they can verify it’s you by asking for another piece of information:

They'll ask for something you know …. like a PIN number or a password, along with

• Something you have, like an authentication application or a confirmation text on your phone, or
• Something you are, like a fingerprint or face scan.
• Two steps are harder for a malicious actor to compromise. So, prove it's you with two … two steps, that is.

Now that you know what it is, you'll see prompts for multifactor authentication all over. So whenever available, be sure to opt in. Start with your email account, then financial services, then social media accounts, then online stores, and don't forget your gaming and streaming entertainment services!

For more information visit CISA More than a Password | CISA