A "second step" needed to log into an online account, in addition to the user's passphrase. 2FA usually takes the form of a short "one time password" consisting of numbers and sometimes letters. 2FA is "something you have" where a password is "something you know".