Understanding Multi-Factor Authentication (MFA)

If you have heard the term “Multi-Factor Authentication” or “MFA”, and not been sure what it means, look no further!

Microsoft have explained it really well, so this blog is based on their wording:

Signing in to online accounts

The process of signing into an online account with your own login details is called authentication, since you are effectively proving who you are when you want to gain access.  Traditionally this has been done with a username and password.

The problem

Unfortunately this is no longer secure enough.  The problem is that a lot of usernames are just the user’s email address, which is often readily available.  And then, since passwords are difficult to remember, people often use simple ones, or re-use the same one across multiple sites.  Both of these approaches mean that passwords are easy to crack.  So a simple username and password combination is no longer sufficient.

Enter MFA (the solution!)

MFA, Multi Factor Authentication, adds another layer to the signing in process to make it more secure.  There are various ways of doing this, but there are 3 basic types:

  • something you own – this uses a device that you have, such as a mobile phone or special dongle, which provides an additional code for you to enter as a second piece of authentication.
  • something you know – in this method you use something you have memorised or stored, such as a PIN.
  • something you are – this final method uses biometrics – maybe a fingerprint as your second authentication.

What is 2FA?

2FA stands for two-factor authentication.  This is also sometimes called 2-step authentication.  This simply means that there are 2 steps to the authentication process, whereas MFA could in theory have more steps (hence multi rather than two!).

Should I use MFA?

If you are given the option of setting up MFA on an online account, it will increase your security if you do so.  Often there are choices, so you can select the method that works best for you.  And they are so quick and easy to use once you get used to them, that it is well worth the small amount of effort it takes to set it up.

Got any more questions?

If you want to know more, or have any further questions about Multi-Factor Authentication, give datamills a call (0114 287 0510) or send us an email (info@datamills.co.uk), and we’ll be delighted to help.

 


Share this: