Multi-Factor Authentication Design

Combining independent authentication factors, and why some MFA methods are meaningfully stronger than others.

Read

45 min

Practice MCQs

25

Interview QA

25

Edition

v5

Editorial status

Reviewed

Relevant for

Identity and Access Management (IAM) Engineer

Scope: NIST SP 800-63B-4, WebAuthn Level 3, FIDO passkey guidance, TOTP/HOTP, CISA, and OWASP guidance current 2026-09-04.