Image sourced from Iberdrola.com. The approach of the New Year is the ideal time to start investigating Multifactor Authentication (MFA), a layered approach to electronic security that requires two or more credentials to verify identity. SA’s Internet Service Providers’ Association (ISPA) says the one-time password (OTP) that underpins many MFA systems ensures there’s an extra security layer preventing unauthorised logins. However, most modern phones and laptops now have built-in security keys and use biometrics to implement MFA. These options are more effective than OTP-based solutions alone. Few realise that when you use fingerprint or facial recognition to unlock your smartphone, you’re using two factor authentication. These biometric systems can also be integrated into any corporate we...
Sourced from Travellers Despite the world’s best efforts to get everyone off passwords and onto something else (e.g., MFA, passwordless authentication, biometrics, zero trust, etc.) for decades, passwords have pervasively persisted. Today, nearly everyone has multiple forms of MFA for different applications and websites AND many, many passwords. The average person has somewhere between three to seven unique passwords that they share among over 170 websites and services. And, unfortunately, those passwords often get stolen or guessed. This is why I recommend the following password policy guide: Most computer security experts agree with these policy recommendations, but more than a few readers might be shaking their heads, especially at the recommendations to use 20+ character passwords/pass...