Belt-and-braces security: Multi factor authentication (MFA)

Because security online is so important, and because cyber criminals are getting more and more clever, a single login is no longer good enough.

It is necessary to use a belt-and-braces approach to security for your online accounts.

Call it insurance.  A fail-safe.  Additional preventative measures.  Backstop.  Double-checking that it’s really you logging in to your accounts.

This is why multi-factor authentication (MFA) has been introduced.

If you have a spare 60 seconds, this little video gives a great overview of what multi-factor authentication is:

 

Multi-factor authentication uses a further measure, beyond your basic login with password, to check that it’s really you.  There are 3 ways that the further check can be made:

  • Something you own – such as a smartphone or a secure USB key
  • Something you know – such as an additional password or PIN
  • Something you are – such as your fingerprint, or facial recognition

How does this extra factor make my accounts more secure?

If somebody manages to get hold of your username and password, they can begin to log into your account.

However, at that stage, the second factor will start to take effect.  Maybe a code will be sent to your mobile phone.  Which you have.  And the cyber criminal doesn’t have.  So they can’t fill in the code, and won’t be able to get any further with logging in…  Your account is safe!

Or perhaps they start logging in with your username and password.  But then they are prompted to use their fingerprint as the next step.  And their fingerprint won’t match yours!  So again, their plan is foiled and your account is safe.

Or maybe they are simply asked for an additional PIN which they didn’t know about.  They can have a guess, but it’s unlikely (unless you’ve stored it with your main username and password – NEVER DO THAT!) that they’ll be successful.

It really does make it so much harder for your accounts to be compromised, so when you are prompted to set up multi-factor authentication on a device or account, DO IT!!

If you need any assistance or advice, give us a call in the datamills office on 0114 287 0510, or send us an email to info@datamills.co.uk.  We’d love to hear from you!


Share this: