Beyond the Password: Why You Need 2-Factor Authentication

While two-factor authentication may sound complicated and cumbersome, Sorin Mustaca, an IT security expert at Avira, said it’s the only way to properly secure critical assets and mobile devices.

“Passwords can be guessed and are very often reused. With so many hacks which occurred, no password can be considered secure anymore. This is why the two-factor authentication is the only way to secure the critical assets of the company,” he said.

For businesses that regularly make remote access to the network, whether through a virtual private network (VPN) or by checking email on a smartphone, two-factor authentication is much safer and more secure than a simple password. Yet, small businesses too often decide not to implement this type of authentication. Mustaca thinks this is due to a lack of understanding about the method, and because businesses take an all-or-nothing approach. Not every situation will call for two-factor authentication, he said.

“Companies should use two-factor authentication to protect assets which are easily stolen and which can be attacked from outside. Any other situation should be properly analyzed, and the risks should be mitigated properly before adding the extra protection,” Mustaca said.