Two passwords still give only one kind of proof
If a website asks for two different passwords to log in, it can feel like two-factor authentication. In reality, two passwords still give only one kind of proof: something you know. True multi-factor security combines distinct categories of evidence, such as something you know and a physical device you possess.
Questions you could explore
- What makes two pieces of evidence different factors?
- Why does using two factors still leave security questions to ask?
Start reading
- National Institute of Standards and TechnologyNIST Special Publication 800-63-4: Digital Identity Guidelines
NIST’s Digital Identity Guidelines define authentication factors and explicitly distinguish two passwords from two factors.
Ready to try your ideas aloud?
Your topic carries over. Record up to 2½ minutes, depending on your plan.