multifactor authentication.md

Multi-factor auth, without the hassle

MFA shouldn’t be a pain. Implement a flexible MFA experience that optimizes security without compromising user experience.

Balancing user experience with Adaptive MFA

MFA is a proven deterrent against 99.9% of hacking attempts, as reported by Microsoft. However, traditional MFA can be an overkill. Enter Adaptive MFA: Only prompt users when a login seems risky, keeping security robust yet user-friendly.

Want to learn more?

Frequently asked questions

What is Auth0 Multi-Factor Authentication (MFA)?

Auth0 MFA is a security layer that requires users to provide two or more verification factors to gain access. It supports various factors including push notifications via Auth0 Guardian, SMS, voice, email, and hardware security keys like YubiKeys, providing a strong defense against stolen credentials.

Does Auth0 support FIDO2 and Passkeys?

Yes, Auth0 MFA supports FIDO2-certified WebAuthn, enabling the use of Passkeys, FaceID, and TouchID. These phishing-resistant methods offer the highest level of security available today while providing a modern, passwordless login experience.

How does MFA help with regulatory compliance?

Auth0 MFA helps organizations satisfy the "Strong Customer Authentication" (SCA) requirements of PSD2, as well as HIPAA and CJIS mandates. By enforcing multi-factor security, organizations demonstrate a high standard of data protection, reducing legal and financial risk.

What is Adaptive MFA in Auth0?

Adaptive MFA uses machine learning to analyze the risk of every login attempt based on context (location, device, IP). If a login appears suspicious, Auth0 automatically triggers an MFA challenge; for low-risk, recognized logins, it stays out of the user's way to minimize friction.

Start your journey with Auth0

Get best-in-class customer identity, with security built in️.