A security process requiring two different forms of verification before granting access — typically something you know plus something you have.
2FA dramatically reduces the risk of account takeover even if a password is stolen, since the attacker would also need the second factor — usually a code from a phone or authentication app.