Safeguards

Two-factor authentication (2FA)

What is two-factor authentication?

Two-factor authentication asks for a second proof alongside the password at login, such as a code from an app or a security key you plug in. A stolen password on its own is then no longer enough to get in.

Public bodies such as the German BSI list two-factor login among the most effective single measures against the misuse of stolen credentials. Microsoft 365, Google Workspace, common VPN products and many industry applications already include it; it only has to be switched on.

The methods differ in strength. A code by SMS is less well protected than an app or a security key, because a phone number can be taken over. For accounts with administrator rights, a security key is the most robust option.

User accounts and permissions in the IT Check

Related terms

Password manager A password manager is an application that stores a company's login credentials in an encrypted vault and enters them when you sig… Password attack A password attack is an attempt to sign in to an account using a password that has been guessed, stolen or leaked elsewhere. The … Permission model and least privilege A permission model defines who may access which data. The principle of least privilege gives every account exactly the rights its…

All terms in the knowledge base

Note: This entry reflects the state of knowledge to the best of our understanding and serves as general orientation. It is not legal advice. What counts is always the version currently in force at the responsible body, for example dsb.gv.at, nis.gv.at or enisa.europa.eu.

From the term to practice

Where does your business actually stand?

The IT Check reviews your IT across 8 audit areas with more than 100 individual checks and delivers documented findings with a prioritised action plan. From 1,299 € excl. VAT. The first call takes 20 minutes and carries no charge.

Book a first call