Do you have Multi-factor Authentication (MFA) turned on?

Here’s why you should:

WHAT IS MULTI-FACTOR AUTHENTICATION?

MFA, sometimes known as “Two-Step Verification,” is an authentication method that requires a user to provide two or more verification factors to gain access to a resource such as an application, online account, or a VPN, according to One Login.

Instead of simply asking for a username and password, MFA requires one or more additional verification factors, which decreases the likelihood of a cyberattack.

One of the most common MFA factors are one-time passwords (OTP), which are 4-8 digit codes often received via email, SMS or some sort of mobile app, when trying to log in to an account.

Other examples include:

• Knowledge: answers to personal security questions or additional passwords.
• Possession: OTPs generated by smartphone apps or sent via text/email/call; access badges, USB devices, Smart Cards or fobs or security keys; and software tokens and certificates.
• Inherence: biometrics such as fingerprints, facial recognition, voice, retina or iris scanning; behavioral analysis.

WHY IS IT IMPORTANT?

MFA adds an extra layer of safety to any account.

“It is not enough to have a strong password,” said Daniel Beato, Director of Technology at TNTMAX.  “It is always best to setup MFA on any system or account you have it available on as an additional security measure. That doesn’t mean that you will be 100% protected, but it is one additional layer of protection for your online presence, privacy, and security.”

 If you’re already using a password manager, some allow you to store an MFA token, providing a centralized and secure option.

“Look at 1Password or Bitwarden implementations, it works very well and allows the complexity of the configuration to be much easier to work with,” noted Beato.

Here are several resources to check out:

https://support.1password.com/one-time-passwords/

https://bitwarden.com/help/authenticator-keys/

https://www.knowbe4.com/how-to-hack-multi-factor-authentication

Call us at 201-891-8686 or email [email protected] for a free cybersecurity evaluation. Read more about TNTMAX’s cybersecurity and compliance services here.