Even strong passwords can be stolen through phishing attacks, data breaches or malware. If a password falls into the wrong hands, MFA provides an additional barrier that attackers must overcome.

This means that even if cybercriminals know a user's password, they are unlikely to gain access without the second authentication factor.