SECAI Core · phase 10 of 15 · noun
Multifactor authentication
An authentication scheme that requires the user to present at least two different factors as credentials; for example, something you know, something you have, something you are, something you do, and somewhere you are.
The Explain card
- Plain English
- Multifactor authentication (MFA) requires at least two different kinds of credential: something you know (password), something you have (phone or key), something you are (fingerprint), something you do, or somewhere you are.
- Example
- Access to the console that manages production model weights requires a password plus a hardware security key. An attacker who phished an engineer's password still cannot log in and swap the model for a backdoored version.
- Why it matters
- AI admin consoles, API key stores and training pipelines are high-value targets. MFA turns a single stolen secret from a breach into a failed attempt.
- Hook
- Two locks, two different keys.
Word knowledge
How the word is built, where it came from, and what it sits beside in memory.
In a sentence
The administrator enabled multifactor authentication on the model registry, pairing each password login with a code from a hardware security key.
Why these words
- multifactor Latin multus, much or many, plus Latin factor, maker or doer modifies authentication by indicating that several factor categories are involved
- authentication Greek authentikos, original or genuine, through Late Latin authenticus names the process performed when identity claims are checked
Where it came from
- Origin
- a modern English compound formed from multifactor and authentication, using elements ultimately derived from Latin and Greek
- Entered the language
- 20th century
- What changed
- Factor broadened from a maker or agent to a contributing element and then a credential category, while authentication shifted from establishing genuineness to checking digital identity claims.
How it is spelled
- Pattern
- The combining form multi- is joined directly to factor without a hyphen.
- Pattern
- Authentication keeps the noun-forming suffix -ation after authenticate.
Spelled like
- multivariable
- multichannel
- authorization
- verification
Broken into chunks
-
multi
- multimodal
- multilevel
-
factor
- factorial
- factorization
-
authentic
- authenticity
- authenticate
-
ation
- authorization
- verification
What it sits beside
Same subject
- identity provider
- hardware security key
- one-time password
- biometric verification
- account recovery
Same shape
- multimodal authentication
- multichannel verification
- multistep login
authentication vocabulary
- credential
- passkey
- security token
- authenticator
multi- compounds
- multifactor
- multimodal
- multistage
Where it sits in the deck
Phase 10: Identity, Access, and Cryptographic Foundations
Before examining threats to systems, establish the foundational security primitives — identity, authentication, authorization, and the cryptography underpinning them.