For example, an attacker gains access to your password through a phishing email. Without MFA, they could easily access your account. However, with MFA enabled, they would also need the one-time code sent to your email or generated by your authenticator app, which they do not have. This additional layer of security significantly reduces the risk of unauthorized access.