Two-step verification, or 2-factor authentication as it is also known, is a security feature that requires not only a user name and password to log in to a system, but also another piece of information that only the user should know. This could be a code sent to the user's mobile phone, for example, or a one-time password generated by an app.