Multifactor authentication (MFA) means a sign-in requires more than one distinct type of authentication factor. A password plus an authenticator app code is one example. Two passwords are still the same kind of factor, so they are not MFA.
Quick example
Someone learns your password, but a sign-in also asks for approval in your authenticator app. Without that second factor, the password alone should not complete the login.
Why it matters
A stolen password is common; another factor creates a second barrier. Two passwords are not two factors, and an unexpected approval prompt may be an attack.
Do this next
Turn on MFA for email and other important accounts. Deny sign-in prompts you did not initiate and keep a backup method.
