An additional security layer that requires two forms of identification, such as a password and a one-time code, to access an account.