What is Multi-Factor Authentication (MFA)?

MFA adds an extra layer of security beyond username and password. It requires something you know (password) plus something you have (a device generating a time-based code). AWS strongly recommends enabling MFA on the root account and all IAM users. Supported MFA devices include virtual authenticator apps, hardware tokens, and FIDO security keys.