Two-factor authentication is where the user is required to enter two pieces of information before they can log in to a website or piece of software. It is called different things by different websites; for example, Facebook calls it ‘login approvals’.