2FA的完整形式是什么？

2FA：两因素身份验证 (2FA: Two-factor Authentication)

2FA is an abbreviation of "Two-factor Authentication".

2FA是“双重身份验证”的缩写 。

It is a system of the method used to enhance the level of security by adding up a further step or section to the user verification process. Fundamentally, it entails the user to go through two successful authentications sooner than access is approved or permitted. Each of the necessary methods of authentication is generally one in the given mentioned below:

它是一种方法的系统，用于通过在用户验证过程中添加其他步骤或部分来增强安全级别。 从根本上讲，它要求用户在批准或允许访问之前，先进行两次成功的身份验证。 每种必要的身份验证方法通常都是下面提到的一种：

• Something the user already familiar with.

  用户已经熟悉的东西。

• Something the user physically grasps.

  用户实际掌握的东西。

• Something indivisible from the user's body.

  用户身体不可分割的东西。

两因素身份验证的示例 (Examples of Two-factor Authentication)

• Whereas going through an ATM transaction, the user required to insert a bank card (something the user physically grasps) and enter a password (something the user already familiar with). These two aspects mutually make it tremendously implausible that an unofficial not permitted user is accessing the bank account.

  进行ATM交易时，用户需要插入银行卡(用户实际掌握的东西)并输入密码(用户已经熟悉的东西)。 这两个方面使非官方的不允许用户访问银行帐户变得极为不切实际。

• Additional examples could be using a password and a fingerprint scan, or a password and a one-time password.

  其他示例可能是使用密码和指纹扫描，或者使用密码和一次性密码。

在线两因素认证 (Online two-factor authentication)

• A lot of numerous online services use two-factor authentication by sending a text message to the user's phone with a single code that must be entered if the computer is not acknowledged.

  许多众多的在线服务都使用两因素身份验证，方法是使用一个单一的代码向用户的手机发送文本消息，如果未确认计算机，则必须输入该代码。

• This structure of two-factor authentication puts a stop to any person devoid of the phone from accessing an account and offers a major noteworthy enhancement to the level of security.

  这种两因素身份验证的结构可以阻止没有电话的任何人访问帐户，并显着提高了安全级别。

• Several corporations may also use a Smartphone app, such as Google Authenticator, to generate arbitrary codes that can be used to authenticate the user devoid of sending a text message.

  几家公司可能还使用智能手机应用程序(例如Google Authenticator)来生成任意代码，这些代码可用于对无需发送短信的用户进行身份验证。

优点 (Advantages)

• No further tokens are required for the reason that it uses mobile devices that are generally carried the entire time.

  由于它使用通常在整个时间携带的移动设备，因此不需要其他令牌。

• As the 2F authentication codes are continuously changed, passcodes that are generated with dynamism are safer to use than predetermined (static) log-in information.

  随着2F验证码的不断更改，通过动态生成的密码比预定的(静态)登录信息更安全。

• Passcodes that have been used depending on the elucidation are automatically substituted to make sure that an applicable legitimate code is all the time obtainable; transmission/reception issues or difficulties do not for that reason put a stop to logins.

  根据说明使用的密码将自动替换，以确保始终可获得适用的合法密码。 传输/接收问题或困难不会因此而停止登录。

缺点 (Disadvantages)

• Users may still be vulnerable and prone to phishing attacks.

  用户可能仍然易受攻击并容易遭受网络钓鱼攻击。

• A mobile phone is not for all time obtainable - they can be missing, misplaced, stolen, have a dead battery, or otherwise not works.

  手机并非永远都可以买到-可能会丢失，放错地方，被盗，电池没电或无法正常工作。

• Mobile phone reception is not always existing - huge areas, specifically situated out of towns, be deficient in reporting or exposure.

  手机接收并不总是存在的-巨大的区域，特别是位于城镇外的区域，缺乏报告或曝光率。

翻译自: https://www.includehelp.com/dictionary/2fa-full-form.aspx