Q: When a website requires me to change a password that I've forgotten, the website often says it will send me a message. The message supposedly will contain either instructions on how to make the change, or a code that I'm supposed to enter. But the message never arrives. My repair shop says it may be a "multifactor authentication problem." What should I do?
Ted Schwarz, Hoschton, Ga.
A: Multifactor authentication is a security measure that lets you prove to a website or online service that you are really who you claim to be. It reduces, but does not eliminate, the risk of someone impersonating you to gain access to your personal information.
For consumers, the most common form of this security technique is two-factor authentication. After you sign in to a website or service with your username and password (or after you use the wrong password enough times), you are automatically sent a message via e-mail or text. Depending on the method used by that website or service, you verify your identity by either responding to the message or entering a code that the message contains.
But there are a few things that can go wrong:
• If your computer or phone is set to the wrong calendar date or time of day, the two-factor identification message may never arrive.
• If the website or service has both your cellphone number (for texting) and your e-mail address, it may choose to send the ID message to you one way and not the other. Check both of them.
• Sometimes an e-mail message that you want to receive is accidentally routed to your spam folder. Look there for any misdirected messages.