Multi-factor authentication (MFA) is a security check that asks for more than a password to sign in. You prove who you are with a second factor, such as a code from an authenticator app or an approval on your phone, so a stolen password alone is not enough to get into your account.
How does MFA work?
MFA combines two or more of these types of proof:
- Something you know: a password or PIN
- Something you have: your phone, an authenticator app or a security key
- Something you are: a fingerprint or face scan
Why does my business need MFA?
Passwords are easily stolen, guessed or reused, and MFA significantly reduces the risk of unauthorised access, email compromise and ransomware attacks. It is also a core requirement of Cyber Essentials, and the rules on MFA became stricter from April 2026.
Where should MFA be switched on?
Start with email and Microsoft 365, then remote access, admin accounts and any cloud service that holds business or customer data.
Read more: Why should my business use MFA?, the main benefits of MFA and what changed in Cyber Essentials from April 2026.
Want this looked after for you?
ABCOM has supported Sussex businesses and charities since 1996 and is an NCSC Assured Service Provider – Cyber Advisor (Cyber Essentials). Talk to a real person about your IT.
Also read
How ABCOM can help
Talk to a real person at our Burgess Hill office. We are an NCSC Assured Service Provider and have supported Sussex businesses since 1996.