MFA

Problem

Alice's password is stolen through phishing. If a password alone proves identity, the attacker is now Alice.

Solution — Multi-Factor Authentication

Require evidence from different factor categories. 
Password
   +
Authenticator
   ↓
Authentication
Core idea: MFA reduces dependence on compromise of a single authentication factor.