Why are two passwords not two-factor authentication?
A password followed by another password asks for the same kind of proof twice. Two-factor authentication combines different kinds, such as something you know and something you possess, rather than simply adding another screen to the login.
Questions you could explore
- What makes two pieces of evidence different factors?
- Why does using two factors still leave security questions to ask?
Start reading
- National Institute of Standards and TechnologyNIST Special Publication 800-63-4: Digital Identity Guidelines
NIST’s Digital Identity Guidelines define authentication factors and explicitly distinguish two passwords from two factors.
Ready to try your ideas aloud?
Your topic carries over. Record up to 2½ minutes, depending on your plan.