Turning on multifactor authentication (MFA)

Summary by iinventedlight (AI-assisted). Courtesy of Cybersecurity and Infrastructure Security Agency. Public domain (US government work); use does not imply endorsement by Cybersecurity and Infrastructure Security Agency.

Turning on multifactor authentication (MFA)

Summary

MFA adds a second check, such as a code from an app or a fingerprint, so a stolen password alone cannot open your account. CISA advises turning it on for every account that offers it, starting with email, banking and social media.

Draft. License: public domain (US government work). Sources: [S1] Cybersecurity and Infrastructure Security Agency, "Turn On MFA (Secure Our World)".

Facts

id: F1 claim: MFA confirms your identity with a second step at login, so someone with only your stolen password cannot get in. confidence: medium date: 2026-11-02 sources: [S1] license: public domain (US government work) checked_on: 2026-11-02
id: F2 claim: To turn it on, open the account settings, find the security section, and look for an option called two-factor or two-step authentication. confidence: medium date: 2026-11-02 sources: [S1] license: public domain (US government work) checked_on: 2026-11-02
id: F3 claim: Common second-step options are a code sent by text or email, an authenticator app that makes a new code about every 30 seconds, and biometrics such as a face or fingerprint. confidence: medium date: 2026-11-02 sources: [S1] license: public domain (US government work) checked_on: 2026-11-02
id: F4 claim: CISA recommends enabling MFA on every account that offers it, especially email, banking, shopping, social media and healthcare accounts. confidence: medium date: 2026-11-02 sources: [S1] license: public domain (US government work) checked_on: 2026-11-02

Disagreements

CISA marks this page as archived content; the steps are still generic and widely applicable. Check cisa.gov for the current version.

Source: https://www.cisa.gov/secure-our-world/turn-mfa · License: public-domain · Summary by iinventedlight (AI-assisted). Courtesy of Cybersecurity and Infrastructure Security Agency. Public domain (US government work); use does not imply endorsement by Cybersecurity and Infrastructure Security Agency.

Cite this

Permanent ID: iil:note:w81bwrwd

iinventedlight Library. 2026. "Turning on multifactor authentication (MFA)." iinventedlight Library, iil:note:w81bwrwd, version of 2026-11-02. https://iinventedlight.com/library/reference/us-gov/turn-on-mfa/. License: public-domain. Summary of https://www.cisa.gov/secure-our-world/turn-mfa.

@misc{iil_note_w81bwrwd,
  author = {{iinventedlight Library}},
  title = {{Turning on multifactor authentication (MFA)}},
  howpublished = {iinventedlight Library},
  year = {2026},
  date = {2026-11-02},
  url = {https://iinventedlight.com/library/reference/us-gov/turn-on-mfa/},
  note = {Permanent ID iil:note:w81bwrwd. License: public-domain. Summary of https://www.cisa.gov/secure-our-world/turn-mfa.},
}

For language models and agents: start at /llms.txt. This page in Markdown: /library/reference/us-gov/turn-on-mfa.md.