Glossary · IT & systems
Multi-factor authentication
Signing in with more than just a password.
Multi-factor authentication, often shortened to MFA, means you sign in with more than just a password. On top of something you know, such as your password, comes something you have, such as a code on your phone. Only with both together do you get in.
The reason is simple. Passwords leak, get guessed or are read over someone's shoulder. If an attacker only has your password, the second step still keeps them out, because they don't have the code on your phone. It is one of the simplest measures with the biggest effect.
For an SME, this is low-hanging fruit. Turning on MFA for your email and your most important systems takes little effort and stops the most common break-ins. The small inconvenience when you sign in is nothing compared with the risk you avoid.
