---
title: Understanding Multi-Factor Authentication Importance | SIRKit
description: Protect your business with Multi-Factor Authentication (MFA). Learn what it is, how to set it up, and why it's crucial for security.
image: https://www.sirkit.ca/hubfs/Imported_Blog_Media/pexels-oleg-magni-2058128-e1620331007784-1.jpg
---
[Skip to main content](https://www.sirkit.ca/blog/what-is-multi-factor-authentication-and-why-is-it-so-important#main-content)
[ ](https://www.sirkit.ca)
- Show submenu for Services Services
- [Managed IT](https://www.sirkit.ca/managed-it-services)
- [Co-Managed IT](https://www.sirkit.ca/co-managed-it-services)
- [Integrated IT Solutions](https://www.sirkit.ca/integrated-it-solutions)
- [Cybersecurity](https://www.sirkit.ca/cybersecurity)
- [Show submenu for About Us About Us](https://www.sirkit.ca/about)
- [Executive Team](https://www.sirkit.ca/about?#exec)
- [Careers](https://www.sirkit.ca/careers)
- [Contact Us](https://www.sirkit.ca/contact)
- [Blog](https://www.sirkit.ca/blog)
Open main navigation
Close main navigation
- Show submenu for Services Services
- Services
- [Managed IT](https://www.sirkit.ca/managed-it-services)
- [Co-Managed IT](https://www.sirkit.ca/co-managed-it-services)
- [Integrated IT Solutions](https://www.sirkit.ca/integrated-it-solutions)
- [Cybersecurity](https://www.sirkit.ca/cybersecurity)
- Show submenu for About Us About Us
- About Us
- [About Us](https://www.sirkit.ca/about)
- [Executive Team](https://www.sirkit.ca/about?#exec)
- [Careers](https://www.sirkit.ca/careers)
- [Contact Us](https://www.sirkit.ca/contact)
- [Blog](https://www.sirkit.ca/blog)
- [Connect with our Team](https://www.sirkit.ca/contact)
[Connect with our Team](https://www.sirkit.ca/contact)
[Skip to main content](https://www.sirkit.ca/blog/what-is-multi-factor-authentication-and-why-is-it-so-important#main-content)
This is an announcement bar or top menu bar. Additional content can go here.
[ ](https://www.sirkit.ca)
- Show submenu for Services Services
- [Managed IT](https://www.sirkit.ca/managed-it-services)
- [Co-Managed IT](https://www.sirkit.ca/co-managed-it-services)
- [Integrated IT Solutions](https://www.sirkit.ca/integrated-it-solutions)
- [Cybersecurity](https://www.sirkit.ca/cybersecurity)
- [Show submenu for About Us About Us](https://www.sirkit.ca/about)
- [Executive Team](https://www.sirkit.ca/about?#exec)
- [Careers](https://www.sirkit.ca/careers)
- [Contact Us](https://www.sirkit.ca/contact)
- [Blog](https://www.sirkit.ca/blog)
Open main navigation
Close main navigation
- Show submenu for Services Services
- Services
- [Managed IT](https://www.sirkit.ca/managed-it-services)
- [Co-Managed IT](https://www.sirkit.ca/co-managed-it-services)
- [Integrated IT Solutions](https://www.sirkit.ca/integrated-it-solutions)
- [Cybersecurity](https://www.sirkit.ca/cybersecurity)
- Show submenu for About Us About Us
- About Us
- [About Us](https://www.sirkit.ca/about)
- [Executive Team](https://www.sirkit.ca/about?#exec)
- [Careers](https://www.sirkit.ca/careers)
- [Contact Us](https://www.sirkit.ca/contact)
- [Blog](https://www.sirkit.ca/blog)
- [Get Started](https://www.sirkit.ca/contact)
[Get Started](https://www.sirkit.ca/contact)
Categories
- [Cyber-Security Advisories](https://www.sirkit.ca/blog/tag/cyber-security-advisories)
- [Technical Pro-tips and How-to](https://www.sirkit.ca/blog/tag/technical-pro-tips-and-how-to)
- [Knowledge Base (KB)](https://www.sirkit.ca/blog/tag/knowledge-base-kb)
- [SIRKit News](https://www.sirkit.ca/blog/tag/sirkit-news)
- [Product Reviews](https://www.sirkit.ca/blog/tag/product-reviews)
- [SIRKit360® News](https://www.sirkit.ca/blog/tag/sirkit360-news)
# What is Multi-Factor Authentication, and Why Is It So Important?
[Kris Wilkinson](https://www.sirkit.ca/blog/author/kris-wilkinson)
May 6, 2021
As a team responsible for protecting thousands of users around Canada, we want to make it clear that if you are not already using Multi-Factor Authentication (MFA) to protect your business and yourself, you should make it a priority to implement as soon as possible.
Clients often ask us if MFA is truly necessary, and the answer is dead simple – Absolutely. 1000% yes.
In this article, we’re going to run through what it is, how easy it is to set up, and why it matters.
If you have online services or allow remote access to your office, it is imperative that you implement MFA to protect yourself. With over 300 million fraudulent sign-in attempts made every day to Microsoft’s cloud services alone, without MFA, it’s only a matter of time before your account is compromised. Fight back and turn it on.
**What is Multi-Factor Authentication (MFA)?**
MFA is a login feature that helps verify your identity. It also provides protection against identity-based attacks. That is, a 3rd party attempting to gain access to an account, which often takes place due to poor password management. For example:
- Weak passwords
- Using the same password on multiple systems
- Sharing passwords
Side Note: Short passwords can be cracked in a matter of seconds. A password with 8 complex characters can be cracked in approximately 8-hours. Check out the table here and test your password strength. If you use the same password for everything, your password may already be in the wild due to a service breach. Check your e-mail address [here](https://community.spiceworks.com/topic/2286767-the-time-it-takes-to-crack-a-password-visualized) for potential exposure.
Cloud services, by nature, are accessible to everyone on the planet, and therein lies the problem. Anyone can attempt to log in. Without MFA, if a malicious actor knows your credentials (username and password) or manages to guess them, they will get in.
Multi-Factor Authentication introduces a secondary verification step that blocks 99.9% of attempted attacks. Even if a malicious party knows your credentials, MFA stops them. When MFA is active, a random code or prompt (push notification) is sent to your mobile device to *confirm your identity*. It takes seconds to complete. Check out [Microsoft’s article](https://www.microsoft.com/security/blog/2019/08/20/one-simple-action-you-can-take-to-prevent-99-9-percent-of-account-attacks/) on how well MFA works.
**The most common ways MFA can be used are:**
Mobile application on your phone (best method)
When a login attempt is made, your mobile device will prompt and ask you to confirm that you are the person attempting to log in. This is the fastest and most secure method to use.
Text or e-mail notification (slower)
When a login attempt is made, a random code is sent that you must provide. Think of it as a secondary password.
Without accepting the prompt or supplying the correct code, access is denied, and you are now aware that someone is attempting to get in.
**How do you set up MFA?**
It depends on the platform. The first step is to contact the support team for each vendor and confirm if they support MFA. You’ll want to investigate your MFA options with banks, line-of-business (LOB), e-mail, cloud storage, password managers, Uber, LinkedIn, VPN services, and everything else that is accessible to the internet.
From there, you may need to configure a few things on the cloud side before MFA can be used on a mobile device.
For businesses, engage your IT team and have them build a plan to roll out MFA for the entire organization. MFA must be configured as a global policy, which means that if an account exists, the system automatically requires MFA to gain access. We often see mistakes made when MFA needs to be manually activated per account. It’s best to keep it simple and use an automatic global policy.
For personal accounts, review the setup instructions provided by each vendor. On mobile devices, we recommend using Microsoft Authenticator or Google Authentication apps to facilitate MFA. They work with most platforms. Using e-mail or text messaging is less secure.
Pro Tip: If the platform states it supports Google Authenticator, you can also use Microsoft Authenticator. Either will work.
**Two-factor authentication (2FA) vs MFA**
You may see 2FA or MFA in your travels and wonder, “What’s the difference?”. It’s based on how many factors or things you need to know or have to authenticate with your account. The most common things are:
- Something you know (e.g. your password)
- Something you have (e.g. your mobile phone)
- Something you are (e.g. biometrics on your mobile phone like a fingerprint or facial recognition)
1FA = 1 of the items above
2FA = 2 of the items above
3FA (MFA) = all items above; Multi-Factor = 3 ways your identity is being verified.
Ultimately, when you activate your phone’s built-in biometrics and use the mobile application option described above, you are using MFA. While 2FA is also good, we recommend leveraging all three to ensure you have maximum protection.
**What does it cost?**
Besides hiring an IT partner to help you set it up, the actual MFA service should be free from the cloud vendor. If they are charging to use it, you may want to find another service!
Cloud vendors recognize how effective this type of protection is and should include it for free.
**Common Misconceptions**
We need to set the record straight on a few things. Some of the rumours out there are interesting.
Completing the extra verification step takes too much time.
A typical push notification using the Microsoft Authenticator app with Office 365 arrives in less than 2 seconds. Text or e-mail verification may take a bit longer, but generally speaking, it’s very reasonable and is the one action that will best protect your account.
Completing an extra verification step every time you log in is too much.
You are not required to complete the MFA verification step every time you log in. Trusted devices, such as your laptop or phone, can be excluded for a certain number of days (e.g. 30 days). Most services now offer this feature, and if they don’t, it’s likely due to the sensitive nature of the protected data.
If my phone is stolen, they can gain access to everything.
Protect yourself! Ensure your phone has a passcode, uses biometrics (e.g. facial recognition or a fingerprint), and encryption. Most of these features are enabled by default out of the box. Using them will protect your accounts.
**A future with NO PASSWORDS!**
As technology continues to advance, you will eventually be able to throw your passwords away. MFA and biometrics, which are already built into many laptops and mobile devices, are almost ready to eliminate passwords. Take the first step and set up MFA.
From Microsoft: Industry protocols such as WebAuthn and CTAP2, ratified in 2018, are making it possible to remove passwords from the equation altogether. These standards, collectively known as the FIDO2 standard, ensure that user credentials are protected end-to-end and strengthen the entire security chain. The use of biometrics has become more mainstream, popularized on mobile devices and laptops, so it’s a familiar technology for many users and one that is often referred to as passwords anyway. [Passwordless authentication](https://www.microsoft.com/en-us/security/business/identity/passwordless) technologies are not only more convenient for people but are extremely difficult and costly for hackers to compromise.
**Conclusion**
MFA is 99.9% effective at blocking identity-based attacks. Absolutely every account should be protected by it. IT should be used on business and personal accounts. If you’re looking for information on how to set up Multi-Factor Authentication for your programs, we can help. [Reach out to us today](https://www.sirkit.ca/contact/) and we’ll help your business become more secure.
**Tags:**
### Related Posts
### Stay connected.
Join our newsletter to stay informed with the latest technology insights, market and business updates, and Sirkit news and events.
###### Categories
- [Cyber-Security Advisories](https://www.sirkit.ca/blog/tag/cyber-security-advisories)
- [Technical Pro-tips and How-to](https://www.sirkit.ca/blog/tag/technical-pro-tips-and-how-to)
- [Knowledge Base (KB)](https://www.sirkit.ca/blog/tag/knowledge-base-kb)
- [SIRKit News](https://www.sirkit.ca/blog/tag/sirkit-news)
- [Product Reviews](https://www.sirkit.ca/blog/tag/product-reviews)
###### Recent Posts
[](https://www.sirkit.ca)
[1-780-758-5200](tel:17807585200) (Support)
[1-587-404-9002](https://www.sirkit.ca/blog/15874049002) (Sales)
Unit 217, 236 91 Street SW
Edmonton AB, T6X 1W8
- [Managed IT Services](https://www.sirkit.ca/managed-it-services)
- [Cybersecurity](https://www.sirkit.ca/cybersecurity)
- [About Us](https://www.sirkit.ca/about)
- [Contact Us](https://www.sirkit.ca/contact)
©2026 Sirkit. All rights reserved. [Privacy Policy](https://www.sirkit.ca/privacy-policy) | [Terms of Use](https://www.sirkit.ca/terms-of-use)
Sirkit® is a registered trademark.
-
-
-
×
×
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Kris Wilkinson",
"url" : "https://www.sirkit.ca/blog/author/kris-wilkinson"
},
"dateModified" : "2026-06-04T16:06:01.302Z",
"datePublished" : "2021-05-06T19:54:08.000Z",
"headline" : "Understanding Multi-Factor Authentication Importance | SIRKit",
"image" : [ "https://www.sirkit.ca/hubfs/Imported_Blog_Media/pexels-oleg-magni-2058128-e1620331007784-1.jpg" ],
"mainEntityOfPage" : {
"@id" : "https://www.sirkit.ca/blog/what-is-multi-factor-authentication-and-why-is-it-so-important",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://www.sirkit.ca/hubfs/Logos/SirkitBadge%20(2).png"
},
"name" : "Sirkit"
}
}
```