By asking users to give two kinds of identification—such as a password and a verification code sent to their mobile device—two-factor authentication (2FA) adds an extra layer of protection. This lessens the possibility of illegal access to payment systems.