# General

What is it?

- MFA (Multi Factor Authentication) enhances your security by requiring to enter a code (= a second factor, *2-Factor-Authentication/2FA*).

Why so complicated?

- Unfortunately, security always comes with an extra amount of effort. Why does need an apartment a door lock? If I loose the key, I'm in trouble?!

Why so many different MFA types?

- Each solution has it own advantage and disadvantage - again, unfortunately there is no one solution who fits all requirements.

#### Types of second factors

- Supported at [https://login.math.uzh.ch](https://login.math.uzh.ch)
- There are more methods (SMS, FIDO, ...) but not supported at MATH/DM3L.

##### TOTP (Time-based One Time Passwords)

- Codes are generated locally by a user's device (an authenticator app on a phone, [KeePassXC](https://wiki.math.uzh.ch/public/books/public-wiki/page/keepassxc), [in-browser extension](https://wiki.math.uzh.ch/public/books/public-wiki/page/in-browser-authenticator)).
- A new code is generated every 30 seconds.
- Configuring TOTP requires to share a secret data between the server and the device: either by copying it directly or by scanning a QR code

##### Email codes

- Codes are sent by the server to user's email and are valid several minutes. Only the last email's code is valid.
- This method requires access to the email account.

##### Recovery (static) codes

- A set of codes (usually 6) is shared between user and the server.
- No expiration time.
- Not practical for every day use, but can be treated as a backup method.