Phishing-Resistant MFA Explained

Wishlist Share

About Course

Not all multi-factor authentication is equal. Learn how attackers get around weaker MFA, what makes FIDO2 security keys and passkeys phishing-resistant, how the NCSC ranks MFA methods for corporate services, and how organisations can move towards stronger sign-in without leaving people behind.

Tutwoo is an independent learning provider. This course is general awareness training written from published official guidance. It does not replace training required for your specific job, and it is not an accredited qualification.

© 2026 Tutwoo UK Limited. This course was created in-house by Tutwoo and is our original work. It is for your own learning only: please do not copy, share, record or resell it.

What Will You Learn?

  • Explain why passwords alone are not enough and how MFA helps
  • Describe attacks that defeat weaker MFA, such as code interception and prompt fatigue
  • Rank MFA methods using the NCSC’s recommended order
  • Plan a practical move to phishing-resistant authentication

Course Content

Course Lessons

  • Why MFA – and why it is not all equal
  • The NCSC’s recommended types of MFA
  • How FIDO2 and passkeys resist phishing
  • Moving an organisation to stronger MFA

Sources & Further Reading
The official guidance this course is based on.

Final Assessment

Student Ratings & Reviews

No Review Yet
No Review Yet

Want to receive push notifications for all major on-site activities?

✕