CYBER SECURITY
What is multi-factor authentication and why does it matter for a business?
Multi-factor authentication requires a second proof of identity beyond a password, such as a code or approval on a phone. It significantly reduces the chance that a stolen or guessed password alone can be used to access a business account.
What multi-factor authentication is
Multi-factor authentication, often shortened to MFA, asks for a second piece of proof beyond a password when someone signs in, such as a one-time code, an approval prompt on a phone, or a security key.
Why a password alone is not enough
Passwords are commonly reused, guessed or exposed in data breaches on other websites. If a password is compromised, MFA gives the account a second layer that a stolen password alone cannot pass.
Where MFA is commonly applied
- Microsoft 365 and email accounts
- Remote access and VPN connections
- Accounting, banking and payroll platforms
- Administrator accounts for IT systems
- Any account holding client or financial information
A practical next step
Review which business accounts do not currently require MFA, prioritise email, finance and administrator accounts, and roll out a straightforward method such as an authenticator app.
RELATED QUESTIONS
Frequently asked questions.
Does multi-factor authentication make sign-in much slower?
It adds a short additional step, but most methods, such as an approval notification, only take a few seconds and are usually only asked for periodically on a trusted device.
Is MFA only necessary for large businesses?
No. Smaller businesses are also targeted, and MFA is one of the more practical, lower-cost controls available regardless of business size.