Authentication verifies a user's identity: what they know (password), have (phone, key), or are (biometrics). You combine several factors for sensitive accounts, limit attempts, and do not reveal which of the entered items is wrong.
Example
Password, then a one-time code from the authenticator app.