Unrivaled Password Security: Since the beginning of computing, the primary method for preventing unauthorized user access to systems, software and data (local or remotely) was the use of a combination of usernames and passwords (an account). When someone presented both components of information of the account (username and password), you could reasonably assume the user was who they were claiming to be (online, at the PC or on the Local Area Network). As technologies and people changed into a increasingly complex world it is important to understand that the basic username/password combinations were developed for a different time, when users didn’t have dozens of passwords to remember for access to multiple systems, applications and data and there were fewer “bad actors” working to compromise the business computing environment. Unfortunately, while the business world grows and flourishes, cybercriminals have grown increasingly adept at guessing, phishing, hacking or stealing the originally designed method of “usernames and password” authentication now using a variety of tools and schemes.

Authorize Resources: As such in today’s current age of technology, Multi-Factor Authentication (MFA)is the preferred tool to help add another layer of protection to your network and computing security while still providing users options for streamlined authentication. (think of IT security like layers of an onion, the more layers put in front of “bad actors” the stronger the security) The actual use of Multi-Factor Authentication typically requires users to provide one additional “factor” of identity validation (but could be more) during the normal login process, most commonly this occurs as a one-time code sent via email, text, or through the use of an authenticator mobile application (such as google authenticator) in addition to their typical username/password credentials. This additional “factor” of authentication ensures validity of the logon users identity. MFA helps secure accounts by requiring the logon user to have access to the authenticated users’ pre-registered email, text, or mobile phone/tablet (in the case of an internet based application/website), but it also audits logon attempts and gives a notice if someone is attempting to access a user’s account without authorization. If the registered user receives such a notice, then the registered user should reset their password to further reduce potential risks.

Additional Security for Business: We highly recommend our customers implement and enable MFA on mission-critical systems with sensitive data across their business where able. Because we value our customers security OhanaIT has turned on MFA by default for our customers using the N-able RMM utility and Meraki Dashboard moving forward. Additionally, we have or will be implementing MFA soon across all our internal systems and networks used to support customers. Please note that while MFA does add an extra step to the user login process, this very simple step is an extremely small price to pay to help prevent very damaging and costly data breaches. We at OhanaIT want to thank you our valued customers for your patronage and further to thank you for your continued understanding and commitment to greater security for us all.