Certified Identity and Access Management Designer

Two-factor authentication requires a verification factor beyond the password, so an attacker who obtains a password through a weak password-reset challenge or through credential reuse on another service still lacks the additional factor needed to sign in. It protects against password compromise and credential-stuffing-style account takeover, rather than against an unattended authenticated session or the general risks of a public Wi-Fi network.