A strong password is important, but it's not always enough to protect your business accounts.

If a cybercriminal obtains your password through phishing, a data breach, or another attack, they may be able to access your account unless additional protections are in place.

That's where multifactor authentication (MFA) comes in.

What Is MFA?

MFA requires users to verify their identity using two or more authentication factors. For example, after entering a password, you might need to approve a notification through an authenticator app or enter a one-time security code.

This additional layer can help prevent unauthorized access, even when a password has been compromised.

Three Practical Steps to Take

1. Enable MFA. Activate it on business email, financial accounts, cloud applications, and other important systems wherever available.

2. Use approved authentication methods. Follow your company's security policies and use its approved authenticator apps, hardware keys, or other methods.

3. Never approve an unexpected login request. If you receive an MFA notification you didn't initiate, deny it and report it to your IT or security contact immediately.

Concierge Insight

MFA is a relatively simple security measure that can add an important layer of protection to your business.

Take a few minutes this week to review which of your business accounts have MFA enabled—and identify any that still need it.