As threats to password security have increased in recent years, multi-factor authentication (MFA) has rapidly gained adoption as a method for increasing the assurance of authentication for consumer and enterprise web and mobile applications. This white paper reviews best practices for engineering and product leaders while building out secure multi-factor authentication models and policies.