Skip to main content
Glossary

What is MFA (multi-factor authentication)?

MFA explained for IT and security teams—workforce vs operational MFA, shared delivery, and MultiMFA.

Definition

MFA (multi-factor authentication) requires two or more factor types—something you know (password), have (phone/app), or are (biometric)—before access. It reduces credential-stuffing impact when passwords leak.

Operational context for teams

Enterprise MFA programs often assume one human, one identity. Shared MFA extends governance to collective logins. Read the MFA for teams hub and shared MFA pillar.

Examples

  • Workforce: Entra MFA on employee laptops.
  • Operational: TOTP viewers for shared AWS billing login.
  • Automation: API TOTP via RoboMFA for approved jobs.

Build your team MFA program

Start with shared operational accounts.

How teams apply this in practice

  1. Split workforce vs operational

    SSO MFA for staff; shared MFA for collective logins.

  2. Inventory factors

    SMS, TOTP, push—tag each shared account.

  3. Pilot MultiMFA

    One billing or admin login first.

MultiMFA

TOTP

MultiMFA TOTP

Shared TOTP enrollment with viewer governance.

Try TOTP
Web Authenticator

MultiMFA Authenticator

Individual web-based TOTP vaults for phone-free teams.

Explore Authenticator
SMS

MultiMFA SMS

Shared SMS verification for operational accounts.

Try SMS

Frequently asked questions

How does MFA relate to shared team access?
Shared MFA applies when multiple people authenticate one operational account—govern delivery instead of chat relay.
Can MultiMFA help operationalize this for teams?
Yes. MultiMFA TOTP and SMS provide governed second-factor delivery—recipients and viewers—without cloning seeds to many phones or forwarding texts in chat. Start with a 14-day trial on one shared login.
Is this the same as a password manager?
Password managers store credentials; some store OTP fields. MultiMFA focuses on second-factor delivery and visibility for accounts that must stay shared—complementary to vaults, not a full replacement.
Is MFA required for compliance?
Many frameworks expect MFA on privileged access; assessors scrutinize how codes are transmitted for shared accounts.

More questions? Contact support or read our security overview.

Govern MFA for collective logins

MultiMFA SMS + TOTP.