Have you implemented 2FA yet?

Let’s begin with what is Muti-Factor or 2 Factor authentications. The simplest definition is; something you know like a password and something you have like a USB token, SMS text, authenticator app on your cell phone.  The best 2-factor authentication process is the one you will use.  Any 2FA is better than no 2FA.  I had a debate with a “security expert” who said SMS authentication is not secure; it is true that it is not the best choice. It is better than relying on a password alone.  I would not recommend clients relying on SMS to protect their most valuable assets. Start with something that works for you for ‘the something that you have,’ like SMS or voice call. Develop the habit of implementing Multifactor authentication everywhere.

Large enterprises have been using multi-factor authentication for decades to protect their systems and data against unauthorized access. What I find interesting is for the past 15 years, a friend has had a small token calculator for accessing their European bank account online; nice to see financial institutions protecting their clients.  I would love to see this level of protection in Canadian banking institutions; however, SMS is a good start (It is an improvement over nothing).

So how does 2FA work?  You first need to set up your multi-factor authentication method with the application you desire to secure. 

How to secure our LinkedIn account with Second Factor Authentication. 

1. We first login normally.

1. Click on me

1. Select Security and Settings

1. Choose Account Tab

1. Under login and security choose
   two-step verification

1. Turn on

1. Choose SMS or Authenticator app

1. If choosing the Authenticator
   app. Install the Google, Microsoft, Authy or other authenticator apps on your
   device, which you will always have with you.

1. Using the authenticator app – to
   add the account, scan QR code with the Authenticator.

1. When the Account shows up added
   in your authenticator app, enter the 6-digit code on LinkedIn to verify the
   Authenticator activation.

1. LinkedIn will confirm that Two-step
   verification is activated successfully.

1. Now each time you log in to
   LinkedIn, enter your username and password. Then you will be prompted to enter
   your 6-digit code from your authenticator for LinkedIn.

1. You will get an email to your
   LinkedIn registered email notifying you that you have enabled two-step
   verification.

Using 2-factor authentication becomes an
automatic habit that protects our identities. 
Yes, it is an inconvenience, just a little; however, the increase in
protection is worth it. An account compromise is a major inconvenience.  Please consider this years ago, people complained
of the inconvenience of wearing safety belts in their cars, now people don’t
even discuss it, it is part of our safety culture. Let’s all make protecting
and securing our identities as a part of our security awareness culture.

There are ways to create two-factor
authentications for your business. If you have questions, stay tuned for future
blog articles.  Please feel free to reach
out by message to speak with me about two-factor authentications to protect
your organization. If your needs are pressing, please call my office to arrange
a time to meet by phone or Zoom meeting.

The worst advice is not to implement any
two-factor authentication as that method is not the best or most secure.

Stay Safe and Secure.
Jeff S Brodie
Managing Partner – Codefusion Communications Inc.

Do you have feedback or questions? Feel
free to schedule a call to speak with me.