What is Multifactor Authentication?
Multifactor Authentication (MFA) is a method of securing an online account with additional security beyond just a password. It is a second item separate from a password that is required when you login to an online account, such as from Microsoft, Google, Amazon, Facebook, eBay, and many others.
Why is it necessary?
Passwords alone aren’t enough to protect your accounts, as they can be stolen during a security breach or obtained through phishing attacks. MFA uses something only you have access to, like your mobile phone, and often provides a changing code (every 30 seconds). This makes it much harder for hackers to access your account, even if they have your password.
What is this second piece of security?
There are two common types of this second piece of security. One is by way of a text message that is sent to you with a code when you login to an online account. Only you have access to your mobile phone, so the code is texted only to you upon login. If a hacker has your password, they will not get the text that is subsequently sent to you. However, a mobile phone can be compromised, and this is not the most secure method. Also, SMS texts are not encrypted.
The other type is what is known as a “One Time Password.” Using an app on your mobile phone, you will see a constant rotation of new codes every 30 seconds, and this is synchronized with where your account is stored (Microsoft, Amazon, PayPal, etc.). This second method is the most secure and what we strongly recommend whenever this is an available option.
How to setup
For all online accounts that you use, we recommend the use of an app on your mobile phone that can generate one-time passwords for various online accounts. Microsoft and Google both offer a free app that can be used for Microsoft, Google, and most other online accounts. There are more premium password managers that offer additional features, such as from 1Password and Bitwarden, but the free ones will work just as well for this multifactor authentication. Once installed, there is a quick setup that is done for each of your online accounts.
How to Use
Once your online accounts are setup in the app on your mobile phone, you will access this app whenever you login to an online account. Often, you will only need to supply the one-time code once from each computer, and it will remember that specific computer for the next time you login thereafter. You will only get prompted again every 90 days or if you login to the online account from a different computer.
