{"id":4013,"date":"2025-09-16T15:23:54","date_gmt":"2025-09-16T14:23:54","guid":{"rendered":"https:\/\/devcmuksite.campaignmaster.co.uk\/?p=4013"},"modified":"2026-05-19T15:26:38","modified_gmt":"2026-05-19T14:26:38","slug":"multi-factor-authentication-mfa","status":"publish","type":"post","link":"https:\/\/campaignmaster.co.uk\/index.php\/2025\/09\/16\/multi-factor-authentication-mfa\/","title":{"rendered":"Multi-Factor Authentication (MFA)"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Multifactor authentication (or MFA) is an account login process that requires multiple methods of authentication in order to verify your identity.<\/p>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Usually, this process will combine two or more independent credentials \u2013 one of which you know (i.e. a password) and one which you\u2019ll obtain (like a security code). For example, along with a password, you might be asked to enter a code sent to your email, answer a security question or confirm a memorable word.<\/p>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">The aim of MFA is to create a layered authentication process to reduce the risk of attackers accessing your account, by using a simple username and password combination; with MFA, if one layer is compromised, access to the account still cannot be gained unless attackers have access to the other.<\/p>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">The use of MFA can dramatically reduce the risk of account compromise under a number of common attack scenarios, including those described below:<\/p>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Attackers could reuse credentials harvested from data breaches or leaked datasets (which are often publicly available) to identify instances where a compromised password is used on other systems.<br><br><\/li>\n\n\n\n<li>Conducting brute-force and credential guessing attacks against application user accounts to identify weak passwords.<br><br><\/li>\n\n\n\n<li>\u2018Credential spraying\u2019 in which an attacker attempts to log into a large number of user accounts; typically, using a small number or even just one commonly used password.<br><br><\/li>\n\n\n\n<li>Social engineering attacks designed to obtain user credentials, such as phishing attacks.<\/li>\n<\/ul>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h1 class=\"wp-block-heading\" style=\"font-size:20px\"><strong>Why is MFA Necessary?<\/strong><\/h1>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Whilst having a strong password is great, it\u2019s sometimes not enough \u2013 in today\u2019s world, both businesses and users alike store vast volumes of sensitive information online. A breach or misuse of this information could have severe consequences. MFA helps to minimise this risk by being the additional layer of security, meaning no one will be able to access your account, even if the password is stolen.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h1 class=\"wp-block-heading\" style=\"font-size:20px\"><strong>How Does MFA Work?<\/strong><\/h1>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">As mentioned earlier, MFA works by requiring additional credentials. Tho most common MFA credentials you\u2019re likely to encounter are one-time passcodes, also known as OTP\u2019s. These are typically 6-8 digit codes that you will receive via email or SMS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One-time passwords are generated every time an authorisation attempt is requested and usually expire within a certain timeframe of being sent for extra security.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, when you try to log into an account, you will first enter your usual credentials being your username and password. Thereafter, you\u2019ll be sent a code via email which you will need to enter on the login screen in order to access your account.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Campaignmaster provides MFA access for all our clients and at no additional charge either.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Would you like to enable MFA on your account with us or perhaps you have some questions about MFA? Get in touch at&nbsp;<a href=\"mailto:info@campaignmaster.co.uk\">info@campaignmaster.co.uk<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Multifactor authentication (or MFA) is an account login process that requires multiple methods of authentication in order to verify your identity. Usually, this process will combine two or more independent credentials \u2013 one of which you know (i.e. a password) and one which you\u2019ll obtain (like a security code). For example, along with a password, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-4013","post","type-post","status-publish","format-standard","hentry","category-campaignmaster-products"],"_links":{"self":[{"href":"https:\/\/campaignmaster.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/4013","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/campaignmaster.co.uk\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/campaignmaster.co.uk\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/campaignmaster.co.uk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/campaignmaster.co.uk\/index.php\/wp-json\/wp\/v2\/comments?post=4013"}],"version-history":[{"count":6,"href":"https:\/\/campaignmaster.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/4013\/revisions"}],"predecessor-version":[{"id":4019,"href":"https:\/\/campaignmaster.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/4013\/revisions\/4019"}],"wp:attachment":[{"href":"https:\/\/campaignmaster.co.uk\/index.php\/wp-json\/wp\/v2\/media?parent=4013"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/campaignmaster.co.uk\/index.php\/wp-json\/wp\/v2\/categories?post=4013"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/campaignmaster.co.uk\/index.php\/wp-json\/wp\/v2\/tags?post=4013"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}