What happens after you enter your password in an MFA login?
Your password was accepted, but the website still wants a code. Follow a typical sign-in to see how the password, authenticator code and session fit together.
Authenticator Cloud Journal
Security basics
Two-factor authentication, digital security and practical guides.
5 articles
SMS, authenticator or passkey: choosing two-factor authentication
An extra sign-in check can take several forms. Here is how text messages, rotating codes and passkeys fit into everyday use.
What are recovery codes, and where should you keep them?
These backup codes can help when your phone is unavailable. Store them separately from everyday codes so you can find them when needed.
Do you still need an authenticator if you use passkeys?
Some websites accept a device unlock; others still ask for a code. You can use both without rushing to remove either one.
Why do authenticator codes change every few seconds?
Codes can appear without an internet connection and change when the timer resets. Here is how the setup secret and clock work together.
