When it comes to cybersecurity, there seems to be an endless list of things you need to do to protect yourself online. However, if you do just one thing today to improve your online safety, make sure it’s this: turn on multifactor authentication (MFA) for your most important accounts.
We live in a world where cybercriminals don’t need to be near you to steal your data. All it takes is one leaked password and they could gain access. The news is constantly reporting on billions of passwords being exposed through data breaches and that could include your info too. So, what can you do right now to make sure your accounts are harder to break into? Turn on MFA.
What is multifactor authentication?
Multifactor authentication, or MFA, is an extra layer of protection for your accounts. Instead of you logging on with just a password, MFA requires a second step for you to prove that you’re the one logging on. Here are a few second factors that you can use:
- An SMS sent to your phone (please avoid this one)
- A code sent to your phone
- An authentication app (Google Authenticator, Microsoft Authenticator, Authy, etc.)
- A physical security key
- Biometrics (your fingerprint, facial recognition, etc.)
You can think of it as that second lock to protect your accounts and multiple locks are better than one.
What about 2FA?
Two-factor authentication, or 2FA, is when you use 2 types of factors to log into your account. MFA on the other hand, can use 2 or more factors to authenticate. MFA and 2FA are often used interchangeably but are different. For example, if you are using a password and an app to log into your account, you’re using 2FA. If you suddenly start using a password, an app and a physical security key, then you’re using MFA.
We’ll stick to using MFA for now as it is the most common term for additional authentication factors.
Why MFA is so important
If you have MFA enabled and hackers manage to steal your password, it makes it harder for them to gain access because of the second step they’d need to perform. This is important because:
- About 90% of account breaches could be prevented with MFA.
- Passwords are leaked all the time and MFA makes the password useless on its own.
- It’s really easy to set up MFA on most accounts.
So, let’s look at how easy it is to set up MFA for your accounts.
How to turn on MFA right now
Follow these steps to enable MFA on your accounts:
- Start with your most important accounts like email, bank, social media, cloud storage.
- Log in and navigate to the “Security Settings” or “Two-Factor Authentication” in the menu.
- Choose your preferred MFA method: app-based codes are the most secure like Google Authenticator, etc.
- Save the backup codes in a safe place (like a password manager) – these can be used to recover your account if something happens.
Combine MFA with super strong passwords
MFA is great but it is even better if it’s combined with string, unique passwords. If you’re struggling with complex passwords, use a password manager to help you keep track of them.
✅ Your 5-minute action plan:
- Pick your main or primary email account.
- Turn on MFA.
- Then do the same for your banking and social media accounts.
By following these steps, you have made it much harder for hackers to gain access to your account. Congratulations and well done on taking an important cybersecurity step today.
Want more cybersecurity quick wins like this? Subscribe to our newsletter and get weekly, easy-to-follow tips to protect yourself online. Be secure!



