{"id":3218,"date":"2023-09-27T14:56:53","date_gmt":"2023-09-27T21:56:53","guid":{"rendered":"https:\/\/blogschapman.wpenginepowered.com\/information-systems\/2023\/09\/27\/unlocking-security-the-importance-of-multi-factor-authentication-mfa\/"},"modified":"2023-09-27T14:56:53","modified_gmt":"2023-09-27T21:56:53","slug":"unlocking-security-the-importance-of-multi-factor-authentication-mfa","status":"publish","type":"post","link":"https:\/\/blogs.chapman.edu\/information-systems\/2023\/09\/27\/unlocking-security-the-importance-of-multi-factor-authentication-mfa\/","title":{"rendered":"Unlocking Security: The Importance of Multi"},"content":{"rendered":"<p><span data-contrast=\"auto\">Multi-factor authentication (MFA), also known as two-factor authentication (2FA) or two-step verification, is a security mechanism that requires users to provide two or more different authentication factors before they can access a system, account, or application.<\/span><\/p>\n<p><span data-contrast=\"auto\">These authentication factors fall into three main categories:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<ol>\n<li><span data-contrast=\"auto\">Something You Know: This is typically a password or PIN only the user should know.<\/span><\/li>\n<li><span data-contrast=\"auto\">Something You Have: This involves a physical device or token that the user possesses, such as a smartphone, smart card, or hardware token.<\/span><\/li>\n<li><span data-contrast=\"auto\">Something You Are: This factor is based on biometric information, such as fingerprints, retina scans, or facial recognition.<\/span><\/li>\n<\/ol>\n<p><span data-contrast=\"auto\">The idea behind multi-factor authentication is to add an extra layer of security beyond just a username and password. Here is why it is important:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Enhanced Security<\/span><\/b><span data-contrast=\"auto\">: MFA significantly improves security because even if a malicious actor manages to obtain your password, they cannot access your account without the second factor. It adds complexity and makes unauthorized access much more difficult.<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Protection from Password Theft<\/span><\/b><span data-contrast=\"auto\">: Passwords can be easily stolen through various means like phishing attacks, data breaches, or social engineering. MFA mitigates the risk of unauthorized access even if passwords are compromised.<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Reduced Risk of Unauthorized Access<\/span><\/b><span data-contrast=\"auto\">: With MFA in place, even if someone guesses your password, they will still need the second factor to gain access. This makes it highly unlikely that an attacker can successfully breach your accounts.<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Compliance Requirements<\/span><\/b><span data-contrast=\"auto\">: Many industries and regulations (e.g., PCI DSS for payment processing or HIPAA for healthcare) mandate the use of multi-factor authentication to protect sensitive information.<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Remote Access Security<\/span><\/b><span data-contrast=\"auto\">: In an era of remote work, where employees access company resources from various locations and devices, MFA provides an additional layer of security to prevent unauthorized access to corporate systems.<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Mitigating Phishing<\/span><\/b><span data-contrast=\"auto\">: Even if users fall victim to phishing attempts and unwittingly provide their passwords, MFA can thwart attackers because they will not have the second authentication factor.<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Ease of Use<\/span><\/b><span data-contrast=\"auto\">: Modern MFA methods, like push notifications or fingerprint recognition on smartphones, have made multi-factor authentication more user-friendly and convenient compared to traditional methods.<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"auto\">To learn how to set up Multi-Factor Authentication for your Chapman University account<\/span><span data-contrast=\"none\">, visit <\/span><a href=\"https:\/\/www.chapman.edu\/campus-services\/information-systems\/security\/2-factor-authentication.aspx\"><span data-contrast=\"none\">Chapman University&#8217;s 2-Factor Authentication page<\/span><\/a><span data-contrast=\"none\">.<\/span><\/p>\n<p><b><span data-contrast=\"none\">If you receive a suspicious email in your Chapman account<\/span><\/b><span data-contrast=\"none\">, do not click on any link or reply to the sender. Instead, please continue to report any malicious message by <\/span><b><span data-contrast=\"none\">forwarding it as an attachment<\/span><\/b><span data-contrast=\"none\"> to <\/span><a href=\"mailto:abuse@chapman.edu\"><span data-contrast=\"none\">abuse@chapman.edu.<\/span><\/a><span data-contrast=\"none\"> To see the latest trending scams, please visit <\/span><a href=\"http:\/\/www.chapman.edu\/scams\"><span data-contrast=\"none\">www.chapman.edu\/scams<\/span><\/a><span data-contrast=\"none\">.<\/span><\/p>\n<p><span data-contrast=\"none\">Stay vigilant, stay safe!\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:1,&quot;335559739&quot;:160,&quot;335559740&quot;:360}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Chapman University Information Systems &amp; Technology (IS&amp;T)<\/span><span data-ccp-props=\"{&quot;201341983&quot;:1,&quot;335559739&quot;:160,&quot;335559740&quot;:360}\">\u00a0<\/span><\/p>\n<hr \/>\n<h2 style=\"text-align: center\"><b>PRIZE ALERT!<\/b><\/h2>\n<p>For each of the four weeks of Cybersecurity Awareness month, we will have a weekly <strong>&#8220;challenge&#8221;<\/strong> to earn cool prizes! Anyone who completes the weekly challenge will be entered into the raffle for that prize.<\/p>\n<p>Rules:<\/p>\n<ul>\n<li><span class=\"ui-provider ec bsk bpi cap caq car cas cat cau cav caw cax cay caz cba cbb cbc cbd cbe cbf cbg cbh cbi cbj cbk cbl cbm cbn cbo cbp cbq cbr cbs cbt cbu\" dir=\"ltr\">The winner will be randomly selected each week.<\/span><\/li>\n<li>The winners must be Chapman staff\/faculty\/students, and submissions will only be accepted from their Chapman email address.<\/li>\n<li><span class=\"ui-provider ec bsk bpi cap caq car cas cat cau cav caw cax cay caz cba cbb cbc cbd cbe cbf cbg cbh cbi cbj cbk cbl cbm cbn cbo cbp cbq cbr cbs cbt cbu\" dir=\"ltr\">Only responses submitted from a Chapman University Email address are accepted.<\/span><\/li>\n<\/ul>\n<p>How to win:<\/p>\n<ol>\n<li>Complete the week&#8217;s challenge and <strong>take a screenshot of your final score<\/strong>.<\/li>\n<li>Email\u00a0<a href=\"mailto:infosec@chapman.edu\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>infosec@chapman.edu<\/strong><\/a> and <strong>include some confirmation of completion<\/strong> (screenshot, print screen, your answers)<\/li>\n<li>Use the following subject line:\u00a0<strong>&#8220;CSAM \u2013 Week 1.&#8221;<\/strong><\/li>\n<\/ol>\n<p>Week 1: <a href=\"https:\/\/kahoot.it\/challenge\/2f4c9661-b272-4edf-ada9-014fc9e802ea_1696030700238\">Kahoot<\/a> &#8211; <strong>click on the link, enter your name, and click &#8216;OK, go!&#8217;<\/strong><\/p>\n<p>Prizes:<\/p>\n<ul>\n<li>1st prize: Anker Portable Charger<\/li>\n<li>2nd prize: Moon Lamp<\/li>\n<li>3rd prize: T-shirt (<span class=\"ui-provider ec bsk bpi cap caq car cas cat cau cav caw cax cay caz cba cbb cbc cbd cbe cbf cbg cbh cbi cbj cbk cbl cbm cbn cbo cbp cbq cbr cbs cbt cbu\" dir=\"ltr\">limited sizes)<\/span><\/li>\n<\/ul>\n<p>That&#8217;s it! We hope to hear from all of you, and good luck!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Factor Authentication (MFA) &#8211; Cybersecurity Awareness Month \u2013 Week 1<\/p>\n","protected":false},"author":3283,"featured_media":3219,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"custom_author_name":"","chapman_pin_hero_slider":"","footnotes":""},"categories":[35,23,33],"tags":[34,28,13],"class_list":["post-3218","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-information-security","category-ist","category-ist-announcements","tag-cybersecurity","tag-information-security","tag-ist"],"_links":{"self":[{"href":"https:\/\/blogs.chapman.edu\/information-systems\/wp-json\/wp\/v2\/posts\/3218","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.chapman.edu\/information-systems\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.chapman.edu\/information-systems\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.chapman.edu\/information-systems\/wp-json\/wp\/v2\/users\/3283"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.chapman.edu\/information-systems\/wp-json\/wp\/v2\/comments?post=3218"}],"version-history":[{"count":0,"href":"https:\/\/blogs.chapman.edu\/information-systems\/wp-json\/wp\/v2\/posts\/3218\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.chapman.edu\/information-systems\/wp-json\/wp\/v2\/media\/3219"}],"wp:attachment":[{"href":"https:\/\/blogs.chapman.edu\/information-systems\/wp-json\/wp\/v2\/media?parent=3218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.chapman.edu\/information-systems\/wp-json\/wp\/v2\/categories?post=3218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.chapman.edu\/information-systems\/wp-json\/wp\/v2\/tags?post=3218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}