What is Multi-factor authentication (MFA)?
Multi-factor authentication requires a second proof of identity, such as a code from an app or a hardware key, in addition to a password.
Why businesses care
Stolen or guessed passwords are among the most common ways accounts are taken over. MFA stops most of those attempts.
Example
Signing in with a password and then approving a prompt in an authenticator app.How to check
Review the security settings of your email, domain registrar, DNS host, website host and accounting tools.
How to fix
Turn on MFA everywhere, starting with email, registrar and hosting. Prefer authenticator apps or security keys over SMS.
Common mistakes
- Enabling MFA for staff but not for the registrar or DNS account
- Sharing one MFA device between people
- No recovery plan when a phone is lost
Sources
Check it with Security Check
Enter your domain for a free security check covering DNS, email authentication, HTTPS and security headers, with a plain-English score and fix steps.
Open Security Check