Multifactor authentication (MFA) requires users to provide two or more verification factors to gain access to a resource such as an application, online account, or a VPN. It is distinct from two-factor authentication (2FA) in that it may involve two or more verifications and is, therefore, considered a broader term. Single-factor authentication only requires one type of evidence, which makes it inherently less secure. Biometrics can be a part of MFA, but when it is used alone, it does not constitute MFA.