Multi-Factor Authentication

Summary

Requiring a second verification factor beyond a password — a simple, high-impact control that prevents the vast majority of account takeovers from a leaked or guessed password alone.

• 1Enable MFA on your own accounts, especially anything with elevated privileges.
• 2Learn the difference between SMS-based, app-based (TOTP), and hardware key MFA in terms of security strength.
• 3Understand why MFA should be mandatory for any privileged account, not optional.