MFA (multi-factor authentication)

A second proof of identity, like a code from an app or a security key, on top of a password.

Think of it as: A PIN on top of the key card.

What to know for Level 0

With MFA, a stolen password alone isn't enough to sign in. Turn it on for root first.
When staff sign in through IAM Identity Center, MFA is required in one place: Identity Center's sign-in settings, for every user.

With MFA, a stolen password alone isn’t enough. Turn it on for root first, then for every person who signs in.