Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →MFA (multi-factor authentication) is a sign-in process that requires at least two different types of authentication factor. A password plus a one-time code, for example, combines something you know with something you have. Two passwords do not count: both are knowledge factors.
What counts as an authentication factor?
Authentication factors fall into three broad categories: something you know, something you have, and something you are. MFA uses at least two distinct categories, not simply two separate credentials. NIST’s MFA overview and its Digital Identity Model describe these categories.
As an Amazon Associate I earn from qualifying purchases.
- Something you know: a memorized secret such as a password or PIN.
- Something you have: a device or token under your control, such as a cryptographic authenticator.
- Something you are: a biometric characteristic.
At an ATM, a bank card and PIN combine possession and knowledge. A password followed by a code sent to a phone also uses two categories. A PIN and password, by contrast, are both knowledge factors. Some cryptographic authenticators can combine factors—for example, a device activated with a biometric or memorized secret. See NIST SP 800-63B-4.
Where is MFA used, and what does it help with?
MFA can control access to online accounts, organizational information systems, and physical spaces. Its practical value is that a stolen or guessed password or PIN may not be enough to sign in when a second authenticator is also required. CISA describes this added barrier in its fact sheet on implementing phishing-resistant MFA.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
NIST recommends using MFA wherever it is available, with particular attention to primary email, financial accounts, and health records. Protecting primary email is especially useful because it may be involved in account recovery for other services.
MFA reduces risk; it does not guarantee that an account cannot be taken over. How much protection it provides depends on the method, how the service implements it, recovery settings, and the attacker’s approach. The available methods are not equally resistant to deception.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
How do MFA methods differ in phishing resistance?
A method is phishing-resistant when authentication secrets or valid outputs are not disclosed to an impostor verifier, without relying on the user to spot the deception. NIST’s current guidance says phishing resistance requires cryptographic authentication. It recognizes channel binding and verifier-name binding as approaches to phishing resistance. Details are in NIST’s authenticator guidance.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Manually entering a one-time password (OTP) or an out-of-band code is not phishing-resistant under NIST SP 800-63B-4. A fake sign-in page can relay a code the user enters, because the code is not bound to the specific login session. That does not make these methods useless: they add a barrier beyond a password, but they offer less protection against phishing than cryptographic methods that bind authentication to the legitimate verifier or session.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Consider a hardware security key when supported
A compatible FIDO2 hardware security key is one possible cryptographic authenticator for phishing-resistant sign-in. NIST provides examples of authenticator types in its authenticator resources. A key is not required to use MFA generally; before choosing one, check that the account supports the sign-in method and that the key’s connector works with your devices.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to choose a method
Compare the options a service actually supports rather than assuming every account offers the same choices. Use these considerations:
Quick Recap
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- Phishing resistance: Prefer a supported cryptographic method when resistance to fake sign-in pages is a priority. Manually entered OTPs and out-of-band codes are not phishing-resistant under NIST’s current guidance.
- Practicality: Choose a method you can use reliably on the devices and in the situations where you sign in.
- Recovery: Understand how you will regain access if the authenticator is lost or unavailable. Recovery processes vary by service, so consult that service’s current official instructions.
- Compatibility: Confirm that both the account and your device support the method. For a hardware key, check the account’s sign-in options and the device connector before buying.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
