{"id":3069,"date":"2025-10-14T19:08:35","date_gmt":"2025-10-14T17:08:35","guid":{"rendered":"https:\/\/www.betaalvereniging.nl\/en\/?post_type=btv_wiki&p=3069"},"modified":"2026-02-26T11:37:39","modified_gmt":"2026-02-26T10:37:39","slug":"two-factor-authentication","status":"publish","type":"btv_wiki","link":"https:\/\/www.betaalvereniging.nl\/en\/knowledge-base\/digital-identity\/two-factor-authentication\/","title":{"rendered":"Two-factor Authentication (2FA)"},"content":{"rendered":"\n

What is two-factor authentication?<\/h2>\n\n\n\n

2FA<\/a><\/strong> is also known as \u2018two-step security\u2019 and uses two different and personal factors to securely approve something digitally. It is used for logging in and digitally approving transactions, such as payments. In the EU, the use of 2FA is legally required for many digital payments, based on the Revised Payment Services Directive<\/u><\/strong><\/a> (PSD2)<\/strong>. 2FA protects digital payments against fraud.<\/p>\n\n\n\n

Two-step verification is a form of Strong Customer Authentication<\/em><\/strong> (SCA). A user must provide two of three different types of factors digitally in order to log in or approve something digitally, such as a payment:<\/p>\n\n\n\n

    \n
  1. Something that only this user knows<\/strong> \u2013 a fingerprint or facial recognition;<\/li>\n\n\n\n
  2. Something only this user knows<\/strong> \u2013 such as a secret number or letter code;<\/li>\n\n\n\n
  3. Something only this user possesses<\/strong> \u2013 such as a debit card, smartphone, or smartwatch;<\/li>\n<\/ol>\n\n\n\n

    Why is 2FA important?<\/h2>\n\n\n\n

    2FA provides an extra layer of protection<\/strong> against certain types of fraud. For banks, payment services, and governments, this strong customer authentication is essential for securely and reliably recognizing customers digitally.<\/p>\n\n\n\n

    Not only under PSD2, but also under the eIDAS Regulation<\/strong> for digital identification services, 2FA is a legal requirement, for example for the future EUDI Wallet<\/strong> (EU Digital Identity<\/em>). Strong customer authentication with 2FA is then required when providing personal data or a digital signature with an EUDI Wallet.<\/p>\n\n\n\n

    2FA in practice<\/h2>\n\n\n\n

    Recognizable examples of two-step security are:<\/p>\n\n\n\n