MFA

MFA requires two or more different types of proof before granting access, such as something you know, something you have, and something you are. Even if a password is stolen, an attacker still needs the additional factor to log in. It is one of the most effective single controls against account takeover.