Choose authentication methods
Compare authenticators, MFA, recovery, and stronger sign-in practices.
- Explain authentication factors and select methods appropriate to risk.
An authenticator provides evidence used during sign-in. Common factor categories are something you know, something you have, and something you are. Multi-factor authentication combines distinct factors; asking for two passwords is not two-factor authentication. Choose methods based on risk, usability, recovery, and phishing resistance. Authentication guidance evolves, so use current standards for deployment details.
MFA can reduce the impact of a stolen password, but methods differ in resistance to phishing and account recovery attacks. Secure enrollment, lost-device recovery, and authenticator revocation are part of the authentication system. NIST’s Digital Identity Guidelines describe assurance levels and authenticator lifecycle requirements for their scope.
Practice: is this really MFA?
Try it
Up to 15 XPCount the factors
Multi-factor means different kinds of evidence: something you know, have or are. Steps don’t count; categories do.
“A password, then a code from an authenticator app.”
“A password, then a security question.”
“A security key unlocked with your fingerprint.”
“A password, then a second password.”
“A phone unlocked with a PIN, approving a passkey sign-in.”
Try it
Up to 15 XPWould this survive a fake login page?
You’ve been tricked into visiting a perfect copy of your company’s login page, and the attacker relays everything you enter. Which methods still protect you?
“A password alone.”
“A password plus a six-digit app code.”
“A password plus an SMS code.”
“A hardware security key.”
“A passkey.”
Try it
Up to 15 XPFind the back door
Strong sign-in is only as strong as its recovery path. Click the steps an attacker would go after.
Click every suspicious section. There are 3.
Key takeaways
Explain authentication factors and select methods appropriate to risk.
Treat access as a lifecycle: grant deliberately, review regularly, and revoke promptly.
Lesson quiz
5 questions · pass with 4 correct · up to 50 XP
Passing this quiz completes the lesson and keeps your streak going. Questions you miss come back in review sessions later.
Questions about this lesson
Stuck? Ask. Figured something out? Share it. Explaining is one of the best ways to learn.
Loading posts…