Two-factor Authentication2FA
दुई-तहको प्रमाणीकरण
Also called OTP, One-time Password, Multi-factor Authentication
Two-factor authentication verifies a user with two different types of evidence, such as a password plus a one-time password sent to a registered phone.
Explained
Authentication factors fall into three categories:
- Something you know: password, PIN or security question.
- Something you have: mobile phone receiving an OTP, hardware token, card.
- Something you are: fingerprint, face or other biometrics.
Two-factor (or multi-factor) authentication combines factors from at least two different categories, so a stolen password alone is not enough to access an account or approve a transaction.
A one-time password (OTP) is a short code valid for one login or transaction and for a short time. It may be sent by SMS or email or generated by an authenticator app or token. App-based and token-based OTPs are considered stronger than SMS, which can be intercepted through SIM swap fraud.
NRB's directives on payment systems and IT require banks and PSPs to apply strong customer authentication for digital transactions. Customers should never share an OTP or PIN with anyone, since bank staff will never ask for them; most digital banking fraud in Nepal involves tricking customers into revealing OTPs.
पासवर्ड र दर्ता गरिएको फोनमा आएको एकपटके पासवर्ड (OTP) जस्ता दुई फरक प्रकारका प्रमाणबाट प्रयोगकर्ताको पहिचान पुष्टि गर्ने विधिलाई दुई-तहको प्रमाणीकरण भनिन्छ।
व्याख्या
प्रमाणीकरणका तीन प्रकार: जानेको कुरा (पासवर्ड, PIN), भएको कुरा (OTP आउने मोबाइल, टोकन, कार्ड) र आफू भएको कुरा (औंठाछाप, अनुहार)। दुई-तहको प्रमाणीकरणले कम्तीमा दुई फरक प्रकार मिलाउँछ, त्यसैले पासवर्ड मात्र चोरिँदा खातामा पहुँच हुँदैन।
OTP एउटा लगइन वा कारोबारका लागि छोटो समय मान्य कोड हो; SMS, इमेल, अथेन्टिकेटर एप वा टोकनबाट आउँछ। SIM स्वाप ठगीको जोखिमका कारण एप/टोकन OTP लाई SMS भन्दा बलियो मानिन्छ। नेपाल राष्ट्र बैंकको निर्देशनले डिजिटल कारोबारमा बलियो प्रमाणीकरण अनिवार्य गरेको छ। बैंकले कहिल्यै OTP/PIN माग्दैन; कसैलाई नदिनुहोस्।
Related
Sources
Updated