A security process requiring users to provide two different authentication factors to verify their identity before accessing systems or accounts, typically combining something they know (password) with something they have (phone) or something they are (biometric).