Technology reference article

Why MFA Does Not Replace Good Technology Practices

Why multi-factor authentication is valuable but only one part of a secure and supportable environment.

Why multi-factor authentication is valuable but only one part of a secure and supportable environment.

Why MFA Does Not Replace Good Technology Practices

Multi-factor authentication is an important security control, but it does not make every other technology decision irrelevant.

MFA protects an authentication step

It can make stolen passwords less useful. That is valuable.

Other risks remain

Devices can still be compromised, data can be deleted, accounts can be misconfigured and services can become unavailable.

Recovery matters

If a user loses access to their authentication method, the business needs a safe recovery process.

Access should still be appropriate

Users should have the access they actually need. MFA does not make excessive permissions harmless.

Security is layered

Good security combines appropriate authentication, updates, backups, access controls, network design, user awareness and recovery planning.

MFA is a strong layer. It is not the whole security strategy.

Related technology guidance

Business technology Explore practical technology guidance for small businesses. Explore Home technology Find practical help for technology at home. Explore Technology Reference Library Return to the library and browse other practical reference material. Browse library
Want to understand the technology in more depth? Explore Technology London →