[Glossary](https://telxpress.com/glossary/) / Security & compliance # MFA (multi-factor authentication) **Multi-factor authentication** (MFA) requires a second proof of identity beyond a password, such as a code from an app or a hardware key, and it defeats most attacks that rely on stolen passwords. - Security & compliance - Updated October 11, 2026 - Written by the Telxpress advisory team 01 In depth ## What it is, why it matters and *what to ask a vendor* NIST's digital identity guidelines (SP 800-63B) describe authentication factors as something you know, something you have and something you are; MFA combines at least two. Authenticator apps, hardware security keys and device-based prompts are stronger than codes sent by text message, which can be intercepted or redirected. For a growing business MFA is the single control most often required by the rules that already apply to it: the FTC Safeguards Rule names it, cyber insurers ask about it, and HIPAA and PCI DSS expect it for remote and administrative access. It belongs on email, the phone system portal, the firewall, remote access, the CRM, banking and every admin account, including the vendors' accounts into your systems. Ask each vendor whether MFA is available on every login to their product, whether it can be enforced for all users rather than offered, which methods are supported, and how a lost phone or key is recovered without opening a hole. Ask your IT partner to roll it out in an order that starts with email and administrator accounts. 02 Related terms ## Terms that usually come up *alongside it* - Network ### [Firewall](https://telxpress.com/glossary/firewall/) A firewall is the security device or service that inspects traffic entering, leaving and crossing your network and allows or blocks it by rule, protecting your systems from the internet and from each other. - Security & compliance ### [FTC Safeguards Rule](https://telxpress.com/glossary/ftc-safeguards-rule/) The FTC Safeguards Rule requires non-bank financial institutions, including car dealerships that arrange financing, to keep a written information security program with named elements such as risk assessments, access controls, encryption and multi-factor authentication. - Security & compliance ### [HIPAA business associate agreement](https://telxpress.com/glossary/hipaa-business-associate-agreement/) A HIPAA business associate agreement (BAA) is the written contract a healthcare provider must have with any vendor that creates, receives, stores or transmits protected health information on its behalf. - Security & compliance ### [Access control](https://telxpress.com/glossary/access-control/) Access control is the system of electronic locks, readers, credentials and management software that decides who may enter which door and when, and records every entry, replacing keys that cannot be revoked. 03 At Telxpress ## Where this shows up *at Telxpress* The pages and articles where this term does real work: what we advise, build and support. - Page ### [Business Networking, Firewalls & Managed Wi-Fi](https://telxpress.com/solutions/business-technology/networking/) Switching, routing, Fortinet firewalls, Ubiquiti and Cisco Meraki Wi-Fi and managed network services for offices that depend on reliable connections. - Industry ### [AI Voice Agents & Technology for Car Dealerships](https://telxpress.com/industries/automotive-dealerships/) Capture every sales and service call with an AI voice agent, meet FTC Safeguards Rule and TCPA duties, and modernize the dealership network. - Article ### [Shielding Success: The Critical Role of Network Security in Business Growth](https://telxpress.com/insights/shielding-success-the-critical-role-of-network-security-in-business-growth/) Why network security matters more as a business grows, the components every business network needs, and the practices that make the difference, from MFA to segmentation. 04 Sources ## Public *references* The standard or law this definition rests on, as published by its owner. Fetched and checked on the review date above. - [NIST SP 800-63B, Digital Identity Guidelines: Authentication and Lifecycle Management](https://pages.nist.gov/800-63-3/sp800-63b.html) pages.nist.gov - [CISA: More than a Password (multifactor authentication)](https://www.cisa.gov/MFA) cisa.gov Next step ## Want This Applied *to Your Business?* Book a free 30-minute AI readiness consultation. You'll leave with three AI opportunities specific to your business, whether you work with us or not. [Book My Free Consultation](https://telxpress.com/book/) [Take the Free AI Readiness Assessment](https://telxpress.com/ai-readiness/) [Or call 24/7: (949) 861-4500](tel:+19498614500) Last reviewed: October 11, 2026. Published by Telxpress, Irvine, CA.