We’ve all been there: you’re in a rush to log in, and your phone buzzes with a request for a six-digit code. While it might feel like a speed bump in your workday, that extra step is actually your strongest defense against a cyberattack.
Our Advice: If the service supports it, turn it on!
Multi-Factor Authentication (MFA) is no longer just for big corporations; it’s the baseline for any business (or individual) that wants to stay secure. As your tech advisors, we want to make sure you’re using it effectively.
How MFA Works
MFA requires two different ways to prove your identity:
- Something you know: Your password.
- Something you have: Your physical phone or a security key.
Even if a hacker correctly guesses your password, they are stuck. They don’t have your physical device, so they can’t get in.
Authenticator Apps: The Gold Standard
While getting a code via text (SMS) is better than nothing, hackers can sometimes intercept texts or “swap” SIM cards.
Authenticator apps (like Microsoft or Google Authenticator) are the “Gold Standard.” They generate unique codes every 30 seconds, tied directly to your hardware, making them much harder to hijack.
If the service you use supports an authenticator app instead of email or text, use it!
Pro Tip: Don’t Get Locked Out
If you’ve ever lost a phone, you know the dread of losing your MFA codes with it. Modern apps let you back up your codes to the cloud for easy syncing to a new device, so make sure you’re logged into the app and not simply using it as a guest.
The Catch: If you use this feature, that specific account login becomes the “keys to the kingdom.” Make sure your account is protected by an extremely strong, unique passphrase. Using a secure password manager like LastPass is a huge help for these types of tasks.
Need a Hand?
If you need help setting up security policies or configuring MFA for your team, let us know!
The ICS Solutions Team is on standby and ready to help.
