A Refresher on Multi-Factor Authentication

Oct 5, 2020 | Cyber Security, IT News

These days, everyone should know what MFA is. Multi-factor authentication is something we’ve covered before as an important, basic step in cybersecurity hygiene. It’s so important in fact, that it’s even part of the Cybersecurity Maturity Model Certification (CMMC) framework.

For those of you who are still unfamiliar with MFA and/or how to implement it, here is a quick but important refresher.

What is MFA?

Multi-factor authentication is essentially an extra layer of security as opposed to having just a password. Your passwords can be easily compromised. MFA immediately increases your account security by requiring multiple forms of verification to prove your identity when signing into an application. Whereas 2FA (two-factor authentication) is limited to just your password and one extra verification step, MFA refers to having two or more extra steps above your password. These extra authentication stages can be performed in several ways, including but not limited to:

  • SMS or voice call – You receive a code on your mobile phone via SMS or voice call to augment the security of your passwords.
  • Software tokens – Authenticator app or other third-party apps generate an OATH (universal Open Authentication) verification code as a second form of authentication.
  • Hardware tokens – This method automatically generates a one-time password based on open authentication (OATH) standards from a physical device.
  • FIDO2 security keys – Users sign in without a username or password using an external USB, near-field communication (NFC), or other external security key that supports Fast Identity Online (FIDO) standards in place of a password.

How Do You Enable MFA?

Every single application, cloud platform, email account, operating system or literally anything that requires a log-in process of some kind is going to have its own method for enabling multi-factor authentication. A decent product will typically remind you to set it up and provide you with instructions on how to go about it, but this isn’t always the case. V2 Systems can help you configure your log-in accounts with various MFA devices and ensure that each and every access point within your organization is as secure as possible.

Why Is Everyone Suddenly Talking About MFA?

A Refresher on Multi-Factor AuthenticationWhile two-factor and multi-factor authentication is certainly nothing new, it’s more important to set it up now than ever before, thanks largely in part to the new normal of working from home. In fact, MFA is the single best thing you can do to improve security for remote work in general. With more people working from home and potentially using different devices, MFA can ensure only the right person is gaining access. The number of cyber attempts reported to the FBI has quadrupled across all sectors since the start of the pandemic. A major part of that increase can be attributed to the rise in the number of employees working from home. User credentials for logging into the company’s network while in the office often lack the robust security required for a remote workforce.

At V2 Systems, we can provide you with the extra layers of security needed to keep your organization safe, no matter the environment. Not only will we ensure that MFA is enabled for every user, but we will also actively monitor your entire cyberinfrastructure in real-time. If you have questions about MFA or cybersecurity in general, contact us for a free consultation.

 

Since 1995, Manassas Park, VA-based V2 Systems has employed local systems administrators, network engineers, security consultants, help desk technicians and partnering companies to meet a wide range of clients’ IT needs, from research, to implementation, to maintenance. Concentrate on your VISION…We’ll handle the TECHNOLOGY!

More From V2 Systems

Does Your Business Need an AI Acceptable-Use Policy? Yes.

AI can improve productivity, but without clear guidelines, it can also introduce security, privacy, and compliance risks. Learn why your business needs an AI acceptable-use policy and how V2 Systems’ NEW Managed AI Services for Business can help you approach AI adoption responsibly.

What Information Should Employees Never Put Into AI?

AI tools can boost productivity, but sharing the wrong information can put your business at risk. Learn what employees should never enter into unapproved AI tools, from confidential business data and customer information to passwords, intellectual property, and CUI.

Before You Turn on AI, Find Out What It Can See

AI can search and summarize company information much faster than an employee browsing folders manually. Learn why businesses should review permissions, sharing, and data access before connecting AI to workplace systems.

ChatGPT, Copilot, Gemini, or Claude: Which AI Is Right for Your Business?

There is no single best AI platform for every business. Learn how to compare ChatGPT, Microsoft Copilot, Google Gemini, and Claude based on your technology, data, security requirements, costs, and business goals.

Free AI or Paid AI? Why Your Business License Matters

A paid personal AI account is not necessarily the same as a business license. Learn what organizations should consider when comparing free and paid AI tools, including data protection, administration, access, and cost.

Free
Small Business Cybersecurity Checklist

cybersecurity checklist graphic