Authentication apps typically work by generating a unique code every 30 seconds, which must be entered along with the regular password. This adds an extra layer of security beyond just a username and password. Popular authentication apps include Google Authenticator, Authy, and Microsoft Authenticator.