What on earth is Multi-Factor Authentication?

Multi-Factor Authentication (MFA)

As threats to password security have increased in recent years and there’s been a dramatic increase of Ransomware claims experienced by Cyber Insurers, multi-factor authentication (MFA) has rapidly gained adoption as a method for increasing the assurance of authentication for consumer and enterprise web and mobile applications.

What Multi-Factor Authentication (MFA) is? 

Multi-Factor Authentication (MFA) is an authentication method that requires users to verify identity using multiple independent methods. Instead of just asking for a username and password, MFA implements additional credentials such as a SMS text message with code, software token or authenticator application.

More information available on the website of the Australia Cyber Security Centre (ACSC).

Why is it important? 

As per the ACSC’s website, MFA is one of the most effective controls an organisation can implement to prevent an adversary from gaining access to a device or network and accessing sensitive information. When implemented correctly, multi-factor authentication can make it significantly more difficult for an adversary to steal legitimate credentials to facilitate further malicious activities on a network. Due to its effectiveness, multi-factor authentication is one of the Essential Eight from the Strategies to Mitigate Cyber Security Incidents.