Multi-factor authentication (MFA) requires at least two types of proof of identity: something you know (password), have (app, security key) or are (biometrics). It protects an account even if the password is stolen, and is essential for privileged accounts.