A security method requiring two distinct forms of identification—something you know and something you have—to verify a user's identity before granting access.