A security process requiring users to verify their identity using two or more factors — such as a password and a mobile code — before accessing systems or data.