FAQ #1449: Is two-step authentication acceptable for PCI DSS Requirement 8.4?

ℹ️

Reference Content: This is a copy of content from the PCI Security Standards Council FAQ database, preserved for tracking changes over time.

View Original →

FAQ #1449 Published Version: 2026-01-21T10:49:46+00:00

Is two-step authentication acceptable for PCI DSS Requirement 8.4?

For more information about multi-factor authentication, refer to the Information Supplement: Authentication Guidance, available under Guidance Document in the PCI SSC Document Library. Our document library can be accessed on our website at: https://www.pcisecuritystandards.org/document_library/

View original on PCI SSC website View all versions Back to recent changes

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.