Securing SMBs with phishing-resistant MFA

The trouble with passwords

Passwords are easy to create and use, offering access to enterprise systems and applications. However, they are increasingly the cause of costly security breaches. In fact, weak passwords or the use of lost or stolen credentials are responsible for more than 80% of breaches in 2020. Stolen credentials not only allow malicious actors to impersonate a compromised user, but can also be used to gain additional credentials and information.

Modern MFA addresses modern threats

Authentication using only a username and password is single-factor authentication. By adding an additional, physical layer of MFA with security keys, SMBs can significantly reduce cyber risks. 

MFA raises the bar for security by requiring a user to offer 2 out of 3 factors to verify their identity:

• Something you know
  (e.g. username and password)
• Something you have
  (e.g. YubiKey security key or token)
• Something you are
  (e.g. biometric – fingerprint, facial recognition, iris scan)

The bar is simply too low with passwords. Even legacy MFA methods, such as SMS or mobile authentication, have all been proven to be highly vulnerable to phishing. Phishing-resistant MFA is the modern and effective approach to keeping your hard work, brand image, and business protected.

Stop account takeovers

Get strong security in minutes with the YubiKey, a hardware security key that provides phishing-resistant two-factor, multi-factor, and passwordless authentication. Move beyond passwords with a solution that’s been proven to stop account takeovers in their tracks and mitigate risks tied to growing ransomware threats. With the YubiKey, you can secure your business, become a trusted part of the supply chain, and experience peace of mind.

Experience fast and easy account login

Using a YubiKey is very simple. To get started the user simply needs to register their YubiKey with the applications or services they wish to secure. Just enter a PIN or password and touch or tap your YubiKey, and you’re in. Reduce downtime due to password-related account lockouts and deliver an intuitive experience to your users for wider security adoption and greater user satisfaction.

Secure all the systems you use to stay productive

YubiKeys work seamlessly across on-premises or cloud environments and offer secure access to:

• Email/webmail
• Corporate virtual private networks (VPNs)
• Internet-facing systems
• Cloud solutions
• Network devices
• and much more

One key can work across hundreds of applications and systems and YubiKeys share secrets between registered services, store no data and require no cellular connectivity. Work offline anytime, anywhere and experience always-on security keeping user identities and the business safe.