Two-Factor-Authentication-2FA(1)

1.

Two-Factor Authentication (2FA)
A practical guide for information security professionals
Ganzha M.V.
Ktbo3-10

2.

Goal & Plan
Our Goal
What We'll Cover
Understand why 2FA is essential in
01
modern cybersecurity — and how to
What is 2FA?
implement it effectively.
02
How it works
03
Why it matters for InfoSec
04
Best practices & conclusion

3.

Beyond Passwords
A single password is no longer enough. Two proofs
of identity dramatically reduce the risk of
unauthorised access — even when credentials are
One Factor
stolen.
Password alone — easily stolen, phished, or leaked
Two Factors
Password + a second proof — access blocked
without both

4.

How 2FA Works: The 3 Factors
Something You Know
Something You Have
Password or PIN — the
Phone, hardware token, or
most common factor, but
authenticator app — a
vulnerable to theft
physical second layer
Something You Are
Fingerprint, face scan —
biometric proof unique to
you
2FA = any 2 of these factors combined for verified, secure access

5.

Why It Matters for InfoSec
99%
Account takeovers blocked
Microsoft research — 2FA stops nearly all automated attacks
Threats Defended Against
Phishing
Credential Stuffing
Stolen passwords become useless
Breached password lists can't unlock
without the second factor
accounts protected by 2FA
ISO 27001
GDPR
NIST 800-63
Compliance frameworks mandate strong authentication across the enterprise.

6.

Real-World Use & Best Practices