Multi-factor authentication (MFA)
Authentication requiring evidence from at least two different factor categories, such as knowledge and possession.
In practice
Enforce phishing-resistant MFA for administrators and remote access where feasible, and monitor exceptions.
Common confusion
Two passwords are not two factors; multiple checks from the same factor category do not constitute MFA.