Glossary
What is two-factor authentication (2FA)?
Two-factor authentication (2FA) is a sign-in method in which you provide a second proof in addition to your password, such as a one-time code sent by email or generated in an app. A stolen password alone is then not enough to sign in.
Two-factor authentication (2FA) explained
2FA combines two kinds of proof: something you know, such as a password, and something you have, such as a phone, a mailbox or a security key. Common second steps are a code by email or text message, a code from an authenticator app, a push notification or a passkey.
Not every second step is equally strong. A code by text message or email is much better than a password alone, but can be intercepted if the mailbox or phone number has been taken over. Authenticator apps, passkeys and hardware keys are stronger, especially against phishing.
2FA is a form of multi-factor authentication (MFA). MFA is the broader term for signing in with two or more factors; in practice the terms are often used interchangeably.
Example
A branch manager at Acme Groothandel signs in to the reporting portal with his email address and password. He then receives a six-digit code by email, which he enters to get in; without access to his mailbox, an attacker with only the password cannot get in.
Two-factor authentication (2FA) in ENABLE
ENABLE uses two-factor authentication by email: a six-digit code valid for five minutes, with a maximum of five attempts. On top of that there is a minimum password length of twelve characters, a session overview with "sign out other sessions" and automatic sign-out, after 30 minutes by default.
FAQ
Frequently asked questions
What is the difference between 2FA and MFA?
2FA uses exactly two factors to sign in; MFA uses two or more. 2FA is therefore a form of MFA, and in practice the terms are often used interchangeably.
Is two-factor authentication by email secure?
It is much more secure than a password alone, because a stolen password is no longer enough. An authenticator app or passkey is stronger, especially against phishing.
What is the most secure form of two-factor authentication?
Passkeys and hardware security keys are the strongest, because they resist phishing. Authenticator apps are a good second choice.
Further reading
- PlatformPower BI row-level security and dashboard accessAccess profiles, Power BI row-level security, two-factor authentication and an audit log.Read more
- ResourcesShare Power BI dashboards securely: your optionsYou can share a Power BI dashboard in four ways: Publish to web, sharing in the Power BI service (directly or through an app), inviting external users as B2B guest users, or showing the reports in a portal with Power BI Embedded. For colleagues, the Power BI service is usually enough. To share Power BI dashboards securely with customers, suppliers and other external users, guest users or a customer portal are the right choice; Publish to web is public and never suitable for business data.Read more
- SolutionSecure AI for business: private AI on your dataWhat private, secure AI really means, and how ENABLE limits what the AI sees of your data.Read more
- ResourcesGlossary of data, AI and Power BI termsWhat is a service principal, row-level security, a semantic model, text-to-SQL or RAG? Short, clear definitions of terms around data, Power BI and AI.Read more
Use AI on your own data. Securely, and without the headache.
In an online demo we show how ENABLE makes your data securely available and how you build on it: describing an app in the AI Builder, plain-language questions, dashboards and APIs. And how we set it up and manage it for you.