MFA (Multi-Factor Authentication) Awareness

How much do you know about MFA (Multi-Factor Authentication)?

Multi-factor authentication is a type of authentication that requires the user to provide two or more verification factors to gain access to a resource such as an application, online account, or VPN.

Multi-factor authentication requires one or more additional verification factors, which decreases the likelihood of a successful cyber attack. It is becoming an increasingly popular way to secure online accounts. 

Essentially, it means that there are three factors to an account. These are:

                 1. Username 

                2. Password 

                3. Authenticator/mobile phone 

You need all three things in order to log in or access an account. 

If you only use one computer, you may not get many authenticator prompts. 

If you sign out and back in, you should get a prompt on login. 

If you are not sure why your authenticator is prompting for approval, DECLINE IT. 

Worst case scenario: 

• Something you were working on, or logging into, will say there was a problem. 
• If that happens, try the action again and then approve the authentication prompt. 

Best case scenario: 

• You may have just stopped someone from trying to access your account. 
• If someone were to obtain your username and password, they cannot log in unless you approve it via the authenticator. 

Blindly approving the authenticator prompt without context is dangerous! 

Once a hacker is logged in, they could change your password or authentication device, which will lock you out of your account.  

In a server/Office 365 environment, here at EBS we can correct that, but the damage could already be done and your account could be used to send thousands of spam emails or con your customers out of money by impersonating you or your business. 

If you are getting repeated authentication prompts, and declining doesn’t affect anything on your computer, then we would recommend getting your password changed ASAP.