Multi-Factor Authentication: What It Is and Why It Matters

What MFA is

Multi-factor authentication, or MFA, means proving who you are with more than just a password. Usually that is something you know (the password) plus something you have (a code from an app on your phone). Even if someone steals your password, they still cannot get in without the second factor.

Why a password is not enough anymore

Passwords get reused, guessed, and leaked in breaches all the time. MFA is the single most effective step most businesses can take to stop account takeovers, and it is usually free to turn on.

The common types

• Authenticator app: a rotating code on your phone. The best balance of security and convenience.
• Text message code: better than nothing, but weaker, since texts can be intercepted
• Hardware key: a physical key you tap. The strongest option for high-value accounts.

Where to turn it on first

Start with the accounts that would hurt most if lost: email, banking, and any system that holds customer or patient data. From there, work outward.