So isn't this the same thing? No, not quite anyway. Perhaps it would be better if I first explained the types of factors that can secure you. There are no less than 3:
- Something you have (phone)
- Something that you are (finger -or face scan)
- Something you know/know (password or PIN)
A two-factor authentication secures you by combining 2 different factors. This could be, for example, that first your face is scanned and then you have to manually enter your password or PIN again. A two-step verification uses the same factor twice. For example, receiving a code or verification via email and then via your phone number.