Two-Factor Authentication
Two-factor authentication requires a second proof beyond the password, so leaked or reused credentials no longer grant direct access. It changes [[attacker-economics]] by turning a copied secret into only one part of the job.
Corporate email systems began asking for two proofs because even the correct password may not be trustworthy. The second check exists precisely for the moment when an attacker already has the first.
E1Make the stolen key incomplete
A password is a single proof. Through password-reuse or credential-stuffing, someone else can obtain and present that proof without being you. Two-factor authentication separates access into two requirements: knowing the password and supplying another proof. Compromising one factor therefore does not immediately complete the login. The mechanism does not make leaked credentials harmless; it makes them insufficient.
E1Where it shows up
The corporate inbox
Official email accounts are a natural target because a successful login can expose trusted communications. Corporations adopted two-factor authentication to make attacks against those accounts more difficult even when passwords are under pressure.
E1More friction, not invulnerability
Two-factor authentication raises the cost of using a compromised password; it does not establish that every account or every second factor is unbreakable. It also imposes a security-convenience-trade-off: another proof means another step, and potentially another access problem when that proof is unavailable.
Protect the accounts that can unlock others
Enable two-factor authentication first on your primary email and other high-value accounts, then replace reused passwords with unique ones stored in a password-manager. The two measures solve different failures: unique passwords contain a breach, while the second factor obstructs direct use of a password that still gets exposed.
Episodes that teach this
-
How to Not Get Hacked Online? Cybersecurity Attacks Safety - Tips from a Hacker
· explained at 5:04
1,253 views
"Most of the corporates have started using the two-factor authentication on the official email address... making it more difficult for these kind of attacks to happen."