[img src=”/wp-content/uploads/sites/2/2019/03/blogimg-are-you-ignoring-multi-factor-authentication.jpg” class=”aligncenter”]
It has never been more important to protect your data. According to a McAfee Report, the total cost of cyber-crime in 2018 was over $600 billion. Hackers are constantly scanning websites and networks for vulnerable targets to steal information from including usernames, passwords, and credit card information.
While there are many ways to improve your cyber security, Multi-factor Authentication is one of the most effective ways to help combat attacks.
What is Multi-factor Authentication
Multi-factor Authentication (MFA) is essentially an extra line of defense. Instead of simply requiring a password to access data or an account, MFA also requires another method of confirming identity to make sure users are who they say they are.
These systems will typically ask for 2-3 main pieces of information as a safeguard: a password, a security token, and, in recent years, even a biometric verification like a fingerprint or face scan.
You’re Already Using MFA In Many Instances
MFA is more common than you may realize. For example, when you add a new contact to eTransfer money to, most financial institutions will send a verification code to your mobile device. Similarly, when you withdraw money from an ATM, you must insert or swipe your card, and enter your pin. Even Facebook and Dropbox have options for MFA.
Why Businesses And Employees Need To Enable MFA
Though it shouldn’t replace your current defense systems, MFA is essential to your business’ security. You should enable MFA on all possible accounts – especially those with confidential and sensitive information. It is much more difficult for a hacker to gain access to your network when asked for a fingerprint or one-time-use access code sent to an employee’s mobile device than it is for them to simply steal a password. Using this easy-to-adopt tactic ensures all your company data stays secure.
If You Have Cloud Based Systems And Remote Workers, MFA Is Even More Vital
This becomes even more important if your company uses cloud-based systems that can be opened on any device, anywhere in the world. With remote-work becoming more and more common, it’s extremely likely that you have an employee who works from somewhere other than the office, which can make managing your security a real headache. Enabling MFA gives you peace of mind knowing the only people accessing sensitive information are your employees to whom you have given access to. For example, you could develop a MFA system that requires users to answer a security question when signing in on a new device, or from a device in an unusual location.
Interested In Improving Your Cyber Security Practices? Contact Us.
To keep your network secure and meet your customers’ needs, company leaders need to regularly re-evaluate current IT strategies. We’re committed to ensuring your business is protected from cyber-crime. If you have questions about Multi-factor Authentication, or want to chat about network security in general, we’d love to talk.
Multi-Factor Authentication: What People Ask
So what does multi-factor authentication add to a password?
MFA adds an extra line of defense on top of a password. Instead of a password alone, it requires another way to confirm identity, typically two or three items such as a password, a security token and, in recent years, a biometric like a fingerprint or face scan. Stolen passwords stop being enough.
Am I already using MFA without realizing it?
Probably. Banks send a verification code to your mobile device when you add a new contact to send money to. ATMs want your card and your PIN. Facebook and Dropbox offer MFA options too.
Which accounts should get MFA first?
Turn it on for every account that supports it, especially those holding confidential or sensitive information. A fingerprint or a one-time code sent to an employee’s phone is far harder for a hacker to get than a stolen password. Adoption is easy. There’s little reason to wait on your high-value accounts.
Does MFA matter more with remote staff and cloud tools?
More so. Cloud-based systems can be opened on any device anywhere in the world, and with remote work common, you likely have someone working away from the office. With it switched on, only the employees you’ve authorized can reach sensitive information. You could even require a security question when someone signs in on a new device or from an unusual location, which is one way to build the system around your own risks.
Can MFA replace my other security tools?
It shouldn’t. Essential, yes, but it works alongside your current defenses rather than replacing them. Think of it as another layer. Want to talk through where it fits in your wider network security? Your IT provider can help.
