Passwords are not as strong as you would hope. They get guessed, stolen in breaches, and phished out of well-meaning employees. Multi-factor authentication is the layer that makes a stolen password far less useful, and it is one of the highest-value security moves a business can make. But not every kind of MFA is equally strong. Here is how it works, which types to choose, and how to roll it out.