Many people believe they grasp two-factor authentication. They imagine a six-digit code arriving by SMS, typed in after a password, and suppose the account is safe. That portrayal is incomplete. Two-factor authentication is not a single technology but a security principle that has been silently reshaping digital access for decades. Its real story involves military...

