Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA) is a security measure that requires users to verify their identity using more than one method before they can access an application or account. Instead of relying solely on a password, MFA combines different factors—such as something you know, something you have, or something you are, to make unauthorized access significantly harder.

Aikyam supports multiple MFA options to strengthen authentication:

1. Email codes: A one-time passcode is sent to the user’s verified email address. This adds an extra layer of security by requiring access to a secure email account.
2. Text and Call One-Time Passwords (OTPs): Users receive a unique passcode via SMS or voice call on their registered mobile number. This ensures that access depends on possession of a trusted device.
3. Passkeys: A modern, passwordless authentication method that uses cryptographic credentials tied to the user’s device. Passkeys are phishing-resistant and ideal for high-security environments.
4. Time-based one-time passwords (TOTP): Applications such as Microsoft Authenticator or Google Authenticator generate time-based one-time passwords (TOTP). These codes are valid for a short period and provide strong protection against account compromise.
5. Adaptive authentication Uses contextual signals such as location, device fingerprint, or IP address to decide when additional verification is needed.