A security process that requires users to provide two different types of verification (e.g., password and a code sent to a phone) to access a system or app.

It significantly enhances security by reducing the risk of unauthorized access, even if a password is compromised. This is especially important for cloud and SaaS platforms storing sensitive organizational data.