If there’s one thing we’d ask every client to turn on today, it’s two-step login. You might also see it called two-factor authentication, 2FA or multi-factor authentication.
How it works
After you type your password, you also confirm it’s really you, usually with a code from an app on your phone or a tap on a notification. Even if a criminal steals your password, they can’t get in without your phone.
Where to turn it on first
- Your business email (Microsoft 365 or Google Workspace). This is the big one: whoever controls your email can reset almost every other password.
- Online banking and payment accounts
- Accounting software
- Your website, domain name and hosting accounts
- Social media accounts that represent your business
A few tips
- Use an authenticator app (like Microsoft Authenticator or Google Authenticator) rather than text messages when you can. It’s more secure.
- Save the backup codes somewhere safe, in case you lose or replace your phone.
- Never approve a login request you didn’t start. If your phone asks “Is this you?” and it isn’t, say no and change your password.
It adds a few seconds to logging in, and it blocks the vast majority of account takeovers. That’s a good trade.
Want a second opinion on your setup? Your first 15 minutes are on us. Call (403) 381-7080 or send us a message. Already a client and need help now? Start here.