What is multifactor authentication (MFA)?

Multifactor authentication (MFA) refers to a login process requiring at least two verification factors to access an online account. In addition to a strong password, users must authenticate with an extra method like a secret code received on their mobile devices or a biometric verification using their fingerprints.

MFA aims to add an extra layer of security verification to your login accounts, preventing unauthorized account access in case of a password compromise. With cyberthreats evolving at a rapid pace, MFA systems play a critical role in an organization’s identity and access management framework.

Why is multifactor authentication important?

Digital security is of paramount importance in today’s data-centric business world. Organizations generate huge volumes of critical data daily, and preventing that data from falling into the wrong hands is essential. While passwords can be your first defense, they are vulnerable to brute-force attacks and credential thefts.

MFA can benefit you by preventing cybercriminals from accessing your accounts even if they acquire your passwords. Also, many users practice poor password hygiene by reusing the same password for all their accounts. In such cases, a cybercriminal who accesses one of your accounts may have the ability to access all your accounts. MFA provides a quick and effective way to counter this security loophole.

Is multifactor authentication effective?

It is estimated that over 80% of cyberattacks originate from stolen credentials. Credential harvesting is a serious risk plaguing most organizations globally. Cybercriminals often target organizational data since they know they can leverage this data to compromise bank accounts, credit cards and more.

According to Microsoft, incorporating MFA in your infrastructure will make you 99% less likely to be hacked. While threats like MFA fatigue attacks and session hijacking can still threaten MFA, having this added security measure in place still leaves you much safer than a single-factor authentication system would.

Incorporating MFA is relatively simple in most cases. You need an identity and access management solution that requires a few extra layers of authentication to gain access. This simple move could remarkably improve your security posture and prevent cybercriminals from accessing your critical information.

How does multifactor authentication work?

Most MFA systems still use a username and password as the first step of the authentication process. As always, a strong password is recommended. A robust password management engine with password auto-rotation capabilities is ideal to ensure better security. The MFA process typically begins after the completion of the first-level authentication.

Here’s how the MFA process works:

• Registration: MFA begins with the registration of the additional layers of security. When you sign in for the first time, you will receive a notification to set them up. It could be a biometric authentication system like a fingerprint scanner or a code generated in an authenticator app.
• Authentication: During subsequent logins, the system automatically connects to the registered item and sends the prompts for additional authentication. Once your identity is verified, you may gain access to the system.
• Further logins: Some MFA systems require users to go through the verification process every single time, while others can remember login devices. MFA systems demand verification every single time in highly secure systems with critical data. For other regular usage, MFA authentication can be prompted periodically on a monthly basis.

What authentication factors are commonly used for multifactor authentication?

There are different types of authentication factors used in MFA. These factors authenticate a user’s identity and provide access to the account. The most common authentication factors are as follows:

Knowledge factor

Konwledge factor refers to an authentication factor that requires users to demonstrate knowledge of something hidden – usually a password or a PIN. It is also the most common type of authentication used. When used alone, this type of safeguard offers minimal security that a skillful hacker can compromise. This is why you need additional authentication factors.

Possession factor

Possession factor refers to an authentication factor involving the user’s physical entities. For instance, items like mobile phones, card readers, wireless tags, etc., can be possession factors during a multifactor authentication process.

Inherence factor

Inherence factor refers to an authentication factor that involves metrics intrinsically owned by the user. These factors are 100% unique and are designed to prevent unauthorized access to critical assets. Some of the most commonly used inherence factors include fingerprint scanning, voice recognition, retinal scanning, etc.

What is adaptive multifactor authentication?

Adaptive MFA refers to how organizations can configure MFA based on a user’s risk profile. It includes a broad range of authentication factors and leverages multiple authentication techniques to provide this level of flexibility.

In adaptive MFA, the system can analyze user behavior by considering a range of actions, such as login attempts, device type, location, accessed information, user role, source IP address and more. This analysis is used to adjust the authentication factors, either increasing or decreasing security measures as needed.

Organizations can use a combination of static and adaptive policies to enjoy the maximum benefits of MFA. For instance, a remote worker working with the company device uses a trusted device on an untrusted network. In such cases, IT administrators can use static policies for device security and adaptive policies for network security.

Multifactor authentication vs. two-factor authentication

Two-factor authentication, or 2FA, is a type of multifactor authentication that enforces only two authentication factors. The first authentication factor is typically a username and a password. However, the second authentication factor may vary depending on organizational preferences and compliance requirements.

When it comes to cybersecurity, more is always better. Hence, MFA is always better than 2FA. The more checkpoints you incorporate in your IT infrastructure, the harder it will be for cybercriminals to gain unauthorized access. While MFA certainly adds to the system’s security, it can also create more friction for the users depending on the type of authentication factors used.

Adding more than two layers of security is recommended when critical data security is at stake. Also, the type of authentication factors used play a significant role in your security measures. For instance, push notifications on mobile devices and retinal scanning are much more secure than a one-time password.

What are examples of multifactor authentication?

You may already be using MFA or 2FA in various real-life scenarios without even realizing it. Here are a few examples of MFA in action:

• Online banking: Most online banking systems use MFA to ensure proper identity management of their customers. In the first step, you must provide your login credentials. This is usually followed by a push notification or a secret code sent to your mobile phone. Even if you are logging in from your mobile device, the device information and location must match to establish your identity. Any mismatch will prompt the system to ask for more information.
• Using an ATM: Getting cash from an ATM requires swiping the card and entering your secret PIN. It is a form of 2FA since it asks for two factors: your card and the PIN number. Modern banking systems also verify your face through the camera installed in the ATM. This serves as a form of biometric verification as well.
• Logging into organizational software: Organizations that prioritize security implement MFA to ensure their users must provide additional verification to access their proprietary software. Also, expensive proprietary software has different levels of access based on user roles. By incorporating MFA, administrators can prevent unauthorized access to their software and protect it from piracy.

What are the benefits of multifactor authentication?

By now, we have established that MFA adds an extra layer of security to your system by incorporating more authentication factors. But how does this additional security benefit individuals and organizations? Here is a list of benefits offered by MFA:

• Better controls over data access: To safeguard critical data, it’s essential to implement robust controls that restrict unauthorized access. With MFA, only the right people can access your critical data and confidential information.
• Security against password risks: Did you know that about 65% of people reuse their passwords, even for business accounts? If these passwords are compromised, it increases the risk of potential breaches. MFA protects your IT infrastructure against these threats by adding additional security layers over sensitive information.
• Compatibility with SSO: Additional security layers often translate to more friction for users. To ensure a seamless experience, organizations often incorporate single sign-on (SSO) for their users. This eliminates the need to create unique passwords and provides instant access to multiple applications with a single login. When SSO is combined with MFA, organizations can streamline identity management and reduce user friction.
• Compliance adherence: Organizations must follow the maximum security standards to meet various compliance requirements. MFA is a standard outlined by various regulatory bodies for securing IT infrastructure. For instance, HIPAA requires healthcare providers to use MFA, and PCI-DSS requires MFA to be incorporated in systems that process payments.
• Flexible to meet business needs: MFA can be tailored to meet the specific needs of organizations, allowing companies to implement it for their employees, customers and third-party vendors. When integrated with SSO, it simplifies identity management.

What are the cons of multifactor authentication?

Despite its multiple benefits, MFA is not without its limitations. You may witness the following shortcomings when using MFA in your system:

• Adds friction to the login process: When Google urged customers to adapt 2FA in 2018, less than 10% signed up for it. This indicates that people prefer convenience over security. Despite being beneficial, extra layers of protection add more friction to the login process. Also, it takes more time to gain access with multiple login layers.
• Requires a new solution: MFA requires incorporating a new software tool in your system to establish this feature. Many companies often buy a new password management solution to take advantage of this feature. However, it is even more beneficial if this feature comes with your existing documentation and security solution.

Secure your IT documentation with multifactor authentication

Security is the number one focus for IT Glue. As a leading cloud-based documentation platform, IT Glue comes with multifactor authentication to prevent unauthorized access in any form. IT Glue is equipped with a next-generation password management engine to ensure users have easy access to passwords without the need to memorize them all.

IT Glue has granular permissions so you can control who can access your passwords, and it also has a One-Time Password (OTP) capability for admin passwords so that multiple technicians can access accounts like Office 365 securely and quickly. It also comes with SSO, IP access control, host-proof hosting, audit trail and more within a SOC 2 type II compliant solution. Additionally, with its automated AD password rotation feature, you can keep passwords fresh and easily keep your data secure.

To learn more about how IT Glue can help you with password management, request a demo.

The post What Is Multifactor Authentication? How It Works, Examples and Benefits appeared first on IT Glue.

We designed MyGlue to be an ironclad vault for all your sensitive data, including passwords, personally identifiable information, or financial details. In addition to this, having MFA controls set by account, and having the ability to enforce MFA, allows you to select which clients have MFA mandated, especially useful if you deal with clients in regulated industries.

Enjoy peace of mind that your clients’ information is secure.

To learn more about how MSPs are using MyGlue to deliver exceptional value to their clients, we invite you to download our e-book MyGlue Use Cases. Click here to download.

Ready to say goodbye to password reset tickets? Get a MyGlue Demo!

Yes, I want to learn more about MyGlue!

MyGlue is a password vault that hosts your clients’ passwords, their proprietary documentation and more. Based on the IT Glue framework, MyGlue helps you become a trusted security advisor. Simple. Smart. Secure.

The post Feature Release: Account-Based MyGlue Multi-Factor Authentication appeared first on IT Glue.

You’ve seen the headlines. Every week there’s a new issue developing around security that stems anywhere from breaches to compliance demands. Security in itself has become one of the industry’s most popular and complex topics, and yet, many smaller MSPs are still slow to implement MFA in their company. In 2016 21% of small organizations still had no form of MFA in their organization, along with no plan for future implementation. With SMBs being a significant target for hackers, this number is far too large.

In light of this complexity, somehow the simple security best practices, like your password hygiene, get overlooked. You know how important password security is, but how often do you practice what you preach? Multi-Factor Authentication is a simple and straightforward solution that adds an extra level of security to your information. Let’s dive into it.

What is MFA?

First and foremost, Multi-Factor Authentication (MFA), often referred to as 2-Factor Authentication (2FA), is a method of authenticating a user that requires the use of more than one verification method. There are three components:

• What you know – a username or password
• What you have – a mobile device
• What you are – a fingerprint scanner or similar

Why do you need MFA?

Consider the following questions within your own organization:

• How do you store passwords in your OS?
• Do you store credentials in a browser?
• Do you store any passwords in un-encrypted text files, spreadsheets, or on Post-Its?
• Do you use the same password in more than one core application?
• Do you use a password manager, do you understand how it works and where the single point of failure is?
• Does every password you use personally have appropriate complexity and life-cycle?
• How many passwords have you sent by email or text message recently?
• How much company data is stored on your personal mobile device?

How do you feel about your password security now? Implementing MFA offers your data a greater level of security – and one that you can no longer afford to go without.

You verify yourself all the time

Some consider that taking the extra step to sign in to your account an inconvenience. The reality is, you verify your identity all the time. Consider taking money out at the bank, not only do you need your bank card, but you also need to enter your pin number. Government ID cards are another example. Authenticating ourselves is often so second nature, but there would be huge implications if we didn’t have to do it. When it comes to implementing MFA, it’s the same thing – and it becomes second nature too.

The workspace is changing

No longer is your confidential information kept within the walls of your organization. How much work do you do on your mobile device? What about the rest of your team? Do you ever work from home? These changes in how and where private information is accessed plays a direct role in the security of your information. Using MFA ensures that regardless of where your team is accessing information, that information remains secure.

Using MFA in your IT Glue account

Enabling MFA for your IT Glue account adds an extra layer of security for both you, and your clients. Consider the amount of confidential information you store in your account. Can you really afford to not have the utmost security protecting it?

Wondering how you can enable MFA for your IT Glue account? We have an awesome Knowledge Base article here to tell you.

New to IT Glue? Check out our demo to see what IT Glue can do to increase efficiency in your MSP.

Yes, sign me up for a demo!

IT Glue is the leading documentation platform for MSPs, designed to eliminate waste, improve productivity and hit your SLAs better. We are SOC 2 compliant, meaning that you can count on the security of your information in IT Glue.

The post Why Multi-Factor Authentication Matters for Your MSP appeared first on IT Glue.

In our experience, there is a crucial difference between “knowing” good practice, and practicing it.

What is Multi-Factor Authentication (MFA)?

MFA is a method of authenticating a user that requires the use of more than one verification method. There are three components:

• What you know – a username and password
• What you have – a mobile device
• What you are – a finger print scanner or similar

(To see a comprehensive implementation of MFA, check out Microsoft Azure)

Why do you need MFA?

Take the opportunity to do an unannounced, informal security audit with your team. Ask questions like:

• How do you store passwords in your OS?
• Do you store credentials in a browser?
• Do you store any passwords in un-encrypted text files, spreadsheets, or (sharp intake of breath) on post-its?
• Do you use the same password in more than one core application?
• Do you use a password manager, do you understand how it works and where the single point of failure is?
• Does every password you use personally have appropriate complexity and life-cycle?
• How many passwords have you sent by email or text message recently?
• How much company data is stored on your personal mobile device?

You’ve potentially just discovered some facts that you wish you hadn’t! Today is the ideal opportunity to enforce MFA on any systems that you and your team use. It’s not the only item to address, but it’s a very important step.

In IT Glue, each individual can simply enable MFA on their account. Find out more in the IT Glue Knowledge Base (if you are a partner). Supported mobile apps include: Google, Authanvil, Microsoft, Authy, Duo.

Tip: type “Authenticator” in the App Store for your mobile device to see the many apps available.

Additionally, an Administrator on the account also has the ability to enforce MFA for all your authenticated user accounts.

Our experience: MFA @ IT Glue

When MFA was still a relatively recent addition to the IT Glue platform we issued a challenge to our team early one morning: by 12pm, every account will have MFA enabled. We simply pointed people to the Knowledge Base article and issued the command to follow it, reaching out to our Partner Success team if they need assistance.

I’m thrilled to report that within 2.5 working hours we had every member of our team successfully authenticating MFA – more than 20 of us, in 6 global locations, with a variety of technical ability, and minimal effort.

If you are a partner with us, or looking into the potential of using IT Glue, you’ll be glad to know our team have some rigid internal policies around password management and disk encryption, as well as enforced MFA on all our core systems.

The post How To: Get your Team Using Multi-Factor Authentication appeared first on IT Glue.