Training preview

Multi-Factor Authentication (MFA)

Why a second factor stops most account takeovers, and how to use one without being tricked into approving an attacker's login.

What this training covers

  • What MFA is and why it blocks account takeover even when your password leaks
  • The difference between SMS codes, authenticator apps, and phishing-resistant hardware keys and passkeys
  • MFA fatigue (push bombing) and why you never approve a prompt you did not start
  • Real-time phishing that captures one-time codes, and how to avoid it
  • Saving recovery codes and recovering a lost device without opening a hole
  • Scenario-based judgment for prompts, codes, and login pages

Business outcome

Employees build fast, repeatable security habits that reduce risk and strengthen your compliance posture.