Have you got MFA turned on everywhere?

We’re hoping that at some point recently you would have heard about Multi-Factor Authentication (MFA), otherwise, known as Two Factor Authentication (2FA). Most of you would likely already be using some cloud service(s) which force you to enable this or have already set it up for many of your accounts.

Originally when companies were rolling out two factor Authentication, you would get a code sent to your phone which you would enter after entering your password. This is referred to as SMS authentication and is not considered as safe or as secure as using the now prominently available Authentication Apps. These text messages could be intercepted by those trying to gain access to your account whereas an Authentication app has a 6-digit code that changes every 30 seconds that you need to be able to access.

Always check if any cloud service offers MFA, and if it does, turning it on is a must! It's your first line of defence, regardless of whether you have a strong password. Already have SMS Authentication activated? Maybe it’s time to go back into those security settings to see if the cloud service provider now offers MFA using an Authentication App.

Authenticator apps like Microsoft and Google are both popular choices but don’t offer a backup to all your codes. Technically the Microsoft one does, but only if you link it to a personal MS account. Google also does offer transferring of codes when you receive a new phone. However, with both apps, if you lose the first phone, it will be a pain to recover the codes.

Two solutions that do backup your codes are Authy and LastPass. Links below.

Have you checked if you have Multi-factor authentication turned on in as many places as possible? Those extra few seconds to login could save your data down the track.

Have a look at our handy checklist to see what common services have MFA and how to enable it for your account. Find it here on our Resources page!

mfapic.jpg