Security feature that requires at least two forms of authentication to access a destination or service.