Two-factor authentication (2FA) is an additional layer of security that requires users to provide two pieces of evidence to verify their identity. This can include a combination of something they know (like a password), something they have (like a phone or security token), or something they are (like a fingerprint).