Multi-factor authentication is often described as the extra lock on the door of a digital account. It adds a second step beyond a password, usually a code, a prompt on a phone, or a physical security key. Because of this, many people assume accounts protected by multi-factor authentication are close to invincible.