Multi-factor authentication (MFA) adds additional verification steps beyond passwords, supporting authenticator apps (TOTP), SMS/email codes, push notifications, and biometric methods. Adaptive MFA triggers additional factors based on risk signals like location, device, or login patterns, balancing security with user experience.
Status: specification