Ways of Two

1. Ways of Two-Factor Authentication (2FA) works by ICSS What is 2FA? Two-factor authentication (2FA) is a specific type of multi- factor authentication (MFA) that strengthens access security by requiring two methods to verify your identity. These factors can include something you know like a username and password ,plus something you have like a smartphone app to approve authentication requests.

2. 2FA protects against phishing, social engineering and password brute-force attacks and secures your logins from attackers exploiting weak or stole your data credentials. Differents types of way how 2FA work? 1-SMS 2FA SMS two-factor authentication validates the identity of a user by texting a security code to their mobile device. The user then enters the code into the website or application to which they’re authenticating .and the SMS is valid for particular amount of time ,for that time only that sms data will work. •Simplicity. SMS 2FA simply sends a confirmation code to a user’s mobile phone. Just enter the code and gain access to your information. •Speed and access. If suspicious activity occurs, SMS 2FA sends a one-time password (OTP) to a user’s device, so only the user with that device can log in and verify that their account hasn’t been compromised. SMS 2FA is a quick way to validate the identity of a user. •Ubiquitousness. SMS 2FA is the oldest form of two factor authentication, so it has become a commonly accepted security protocol. 2- TOTP 2FA

3. The Time-Based One Time Password (TOTP) 2FA method generates a key locally on the device a user is attempting to access. The security key is generally a QR code that the user scans with their mobile device to generate a series of numbers. The user then enters those numbers into the website or application to gain access. The passcodes generated by authenticators expire after a certain period of time, and a new one will be generated the next time a user logs in to an account. TOTP is part of the Open Authentication (OAUTH) security architecture. •Flexibility. A user can use it across multiple devices. By contrast, SMS 2FA is restricted to the device that receives the message. TOTP 2FA is more flexible and gives the user a wider ability to access their information. •Improved Access. Mobile authenticators are able to remember which accounts a user is trying to access so the user can access their passcode at any time, even if they are not on a cellular or wifi network. 3-Push-Based 2FA Push-based 2FA improves on SMS and TOTP 2FA by adding additional layers of security, while improving ease of use for end users. Push-based 2FA confirms a user’s identity with multiple factors of authentication that other methods cannot. Duo Security is the leading provider of push-based 2FA.

4. •Phishing security. A push notification is sent to the user’s phone. The notification includes information about the login attempt, such as location, time, IP address, and more. The user simply confirms that the information is correct and uses their phone to accept the authentication request. •Ease of use. Once set up, push-based 2FA streamlines the authentication process. If the information sent through the push notification is correct, the user simply accepts the login attempt through their mobile device and is able to access their account. •Scalable. Push-based 2FA can easily be scaled for organizations needing to secure multiple users. The ease of use allows teams to onboard the software and train teams on how to use it efficiently. Since every access attempt is confirmed with a mobile device, there are no SMS codes to enter or QR codes to save. 4-U2F Tokens U2F tokens secure two-factor authentication by using a physical USB port to validate the location and identity of a user attempting to login. To use a U2F token, a user inserts the token into their device and presses the button located on the top of the device. Once the token is activated, the user enters their PIN and gains access to their accounts.

5. •Phishing protection. Since the user must physically hold, insert, and enter a code into the token, U2F protects a user’s PIN from being phished. •Backup devices and codes. U2F tokens can be backed up across multiple devices, allowing users to replace their token or code if it is lost. •Ease of use. U2F tokens require little set up or technical knowledge to use. 5-WebAuthn Created by the FIDO (Fast IDentity Online) Alliance and W3C, the Web Authentication API is a specification that enables strong, public key cryptography registration and authentication. WebAuthn (Web Authentication API) allows third parties like Duo to tap into built-in capabilities on laptops, smartphones, and browsers, letting users authenticate quickly and with the tools they already have at their fingertips. •Convenience. All you need is a supported web browser, operating system and authentication method such a biometric indicator, a security key (such as a Yubikey), or a system-local PIN for phishproof access. •More secure. WebAuthn is one of the more secure 2FA methods available today. It allows web applications to trust a strong biometric authentication as a credential that is specific only to that service — which

6. means no more shared passwords. We now have a secure means to generate, store and utilize a credential whose attributes are unknown to the user and thus can’t be stolen and exploited. Thats all about the 2FA here we have seen have the 2FA works and how it important things for this digital world. without this method we are unable to secure our data . 2FA is one of the best ways to secure our data .In every field this method is used for secured our data.