Definition
Multi-factor authentication means asking for a second proof in addition to the password when logging in: a code from an app on the phone, an SMS, a hardware key or a fingerprint. Even if the password is stolen, the attacker cannot get in without the second factor; most e-mail account takeovers and ransomware incidents start from accounts without MFA. Priority order: e-mail, VPN and remote access, administrator accounts, cloud consoles, banking. App-based codes and hardware keys are safer than SMS. It may look like a burden for users, but setup happens once and daily use takes a few seconds.
How SMB Teknoloji uses it
We make MFA mandatory on e-mail, VPN, administrator accounts and cloud consoles, set it up for users and document backup login methods.