Businesses should use multi-factor authentication because it adds an extra sign-in check, so a stolen password alone is less useful to an attacker.
MFA is especially important for email, cloud storage, finance systems and administrator accounts. Where available, stronger sign-in methods such as passkeys can provide additional protection.
Read the NCSC guidance on securing important online accounts, and see Kazzoo’s IT Security service in Leicester.
How often should business passwords be changed?
How can a business make its email more secure?
How can a business reduce phishing risk?