What is 2FA?

2-Factor Authentication (also known as Multi-Factor Authentication/MFA) is a simple, yet effective layer to your cybersecurity.

When 2-FA is enabled on an account, you still log in with a username and password. However, you will also need to authenticate the login with a second method.

Typically you will receive a code via SMS or phone call. You will need to enter this code on the login screen of the account you’re trying to access.

2-FA can also be enabled via an app, such as Microsoft Authenticator or Google Authenticator.

Why is 2-FA Important?

As the biggest cloud provider for businesses and organisations, Microsoft 365 has become a target for cybercriminals in recent years.

In fact, it’s estimated that hackers probe approximately 20 million Microsoft 365 accounts per day, in search for valuable information.

If a hacker successfully logs into an employee’s Microsoft 365 account, the possibilities are endless.

For example, they could use Outlook to carry out a phishing attack, export sensitive information stored in SharePoint or delete and corrupt files that could halt the company’s operations and damage its reputation.

You see, Microsoft accounts secured with just a password are more susceptible to hacking. Especially if the password is guessed or phished.

2-Factor Authentication neutralises this threat, as without the approval of the 2nd factor (i.e. your phone), the password alone is useless.

Passwords Are Still Important

Although 2-FA helps protect against unwanted visitors, a strong password is still essential as you don’t want to just rely on 2-FA.

Typically, passwords should include at least 8 characters, a capital letter, special symbol and numerical digit.