General What is it? MFA (Multi Factor Authentication) enhances your security by requiring to enter a code (= a second factor, 2-Factor-Authentication/2FA).  Why so complicated? Unfortunately, security always comes with an extra amount of effort. Why does need an apartment a door lock? If I loose the key, I'm in trouble?! Why so many different MFA types? Each solution has it own advantage and disadvantage - again, unfortunately there is no one solution who fits all requirements. Types of second factors Supported at https://login.math.uzh.ch There are more methods (SMS, FIDO, ...) but not supported at MATH/DM3L. TOTP (Time-based One Time Passwords) Codes are generated locally by a user's device (an authenticator app on a phone, KeePassXC, in-browser extension). A new code is generated every 30 seconds. Configuring TOTP requires to share a secret data between the server and the device: either by copying it directly or by scanning a QR code Email codes Codes are sent by the server to user's email and are valid several minutes. Only the last email's code is valid. This method requires access to the email account. Recovery (static) codes A set of codes (usually 6) is shared between user and the server. No expiration time. Not practical for every day use, but can be treated as a backup method.