Passwords Are Not Enough

One of the biggest weaknesses? Passwords.

In fact, 81% of data breaches are caused by weak or stolen passwords, leaving your sensitive information credit card details, personal identification numbers, and more vulnerable to attacks. Many people still rely on simple, easily guessable passwords like their pet’s name or birth-date.

With cyber-criminals growing more sophisticated, relying solely on passwords to protect your sensitive data is a gamble you can’t afford to take. That’s where Multi-Factor Authentication (MFA) steps in, adding a crucial extra layer of defence that significantly enhances security.

What is Multi-Factor Authentication (MFA)?

Authentication is the process of verifying the identity of a person or system attempting to access a certain resource. Usernames and passwords are used to ensure nobody other than yourself can login to your account. When you only use passwords, it is considered single-factor authentication. However, when you implement an extra layer or two of protection it is called multi-factor authentication. Multi-factor authentication is, in essence, a second form of verification following your password for platforms to make doubly sure you are who you say you are.

The difference between single-factor authentication and multi-factor authentication is how many forms of verification you’re using to login to your accounts. Some common examples of important use cases for multi-factor authentication include banking accounts, payment platforms, and emails. Could you imagine having your banking password stolen and finding all your savings gone, just like that. This is why switching to MFA is crucial to maintain strong protection of your data and privacy.

How Does Multi-Factor Authentication Work?

Multi-Factor Authentication (MFA) enhances security by combining two or more methods to verify a user’s identity. These methods fall into three main categories:

1. Something You Know

   The most familiar form of verification is something you know, such as a password or PIN. These

   are secrets that you memorize or store securely using a password manager. While easy and quick to

   use, passwords can be weak if they’re simple or reused, making them vulnerable to attacks like

   phishing or guessing.

   Example: You might use your favourite password manager to securely store complex passwords, ensuring they are safe from prying eyes.

2. Something You Have

   Something you have refers to a physical object in your possession that you can use to verify your

   identity. Common examples include smartphones, security keys, or hardware tokens. These

   provide stronger security because they require the attacker to have access to your physical device.

   However, if your device is lost or stolen, you could be temporarily locked out of your accounts.

   Example: When you try to log in, you receive a time-sensitive code on your phone or through an app

   like Microsoft Authenticator. Without your phone, no one can complete the login.

3. Something You Are

   The third factor, something you are, refers to biometric authentication, such as fingerprints, facial recognition, or iris scans. This is one of the most secure and convenient forms of authentication since it’s unique to you. However, it also comes with privacy concerns and the occasional risk of mis-identification (false positives or negatives). Example: You unlock your phone with your fingerprint or face, adding a layer of security tied directly to your physical identity.

Why Passwords Aren’t Enough

Even strong passwords can’t fully protect your accounts. Many people create weak passwords based on easily guessed information like birthdays or pet names, making them easy targets for attackers. Worse, these passwords are often reused across multiple sites, meaning one breach can compromise several accounts. Attackers also use brute force methods or phishing tactics to steal passwords.

With the number of online services today, remembering complex, unique passwords for each one is impractical. This leads to simple, reused passwords, putting users at greater risk. The solution? Use Multi-Factor Authentication (MFA) to add an extra layer of security, and consider a password manager to store strong, unique passwords securely. Together, these tools significantly reduce the chance of a cyber-attack.