Passwords alone are easy to steal or guess. Multi-factor authentication (MFA) adds a second check, making stolen passwords far less useful to attackers.
How it works
After entering a password, the user also confirms their identity with something they have, such as a code from an authenticator app, or something they are, such as a fingerprint.
Where to enable it first
- Email accounts
- Cloud storage and collaboration tools
- Banking and payment systems
- Administrator accounts for websites and servers
Choose stronger methods
Authenticator apps and hardware security keys are generally more secure than codes sent by SMS, though any MFA is far better than none.
Plan for lost devices
Set up backup codes or alternative methods so staff are not locked out when a phone is lost.
Enabling MFA takes minutes and blocks a large share of account takeover attempts. It should be standard for every organisation.
Need help putting this into practice?
Our team at Ingata Technologies can help you plan, build and support the right solution for your organisation.
Talk to Our Team
