Phishing-resistant MFA is an authentication process which protects your accounts against attackers as well as stopping you from revealing login information to unverified sources and websites. Phishing-resistant MFA requires a few qualities:
It needs to rely on a user’s identity for authentication.
Authentication can only ever be performed by a private key, which is usually hardware.
Authentication cannot be completed by someone impersonating a user or their hardware key.
Authentication is only approved by the user, who must initiate and authorize the login.
YubiKey is phishing-resistant because it is a FIDO2-certified hardware key which is physically used by a user to authenticate their and identity and authorize access.
Learn more about phishing-resistant MFA