--- title: "What is multi-factor authentication?" description: "Multi-factor Authentication explained in plain English: definition, how it works in a remote team, an example. See an example and the common mistakes." url: https://assistbpo.com/glossary/multi-factor-authentication/ updated: 2026-09-20 publisher: AssistBPO (SS Support Network LLC) language: en-US --- # What is multi-factor authentication? Glossary What is multi-factor authentication? Multi-factor authentication is a login that demands two or more different kinds of proof: something you know such as a password, something you have such as a phone or hardware key, and sometimes something you are such as a fingerprint. A stolen password on its own is then not enough. Updated September 2026 · Reviewed by [Nimra Khalid](https://assistbpo.com/team/nimra-khalid/) ## How does multi-factor authentication work? 1. Switch it on for email and the identity provider first, because those reset passwords everywhere else. 2. Prefer an authenticator app or a hardware key over text messages, which can be redirected to another phone. 3. Enforce it by policy across every account rather than leaving it to individual choice. 4. Keep recovery codes somewhere secure and separate, so a lost phone does not lock out a whole desk. 5. Audit each quarter for accounts that still lack it, starting with finance and admin logins. ## A worked example A freight brokerage had a booking address compromised through a reused password and nearly paid an altered invoice. It now enforces app-based verification on Microsoft 365 for everyone, including the remote assistants working the load board, and keeps recovery codes in a password manager the operations manager controls. Two months later a phishing attempt captured a password, the login failed at the second step, and the alert reached the manager the same morning. ## Where does multi-factor authentication show up in your tools? Google Workspace and Microsoft 365 both enforce it centrally across every connected app, which is the change worth making first. Zendesk, HubSpot, Shopify, Xero, RingCentral and Dialpad each carry their own setting under security or admin, for accounts that sign in directly. ## Common mistakes - Protecting the CRM but leaving the mailbox open, which is exactly where password resets arrive. - Relying on text codes for finance logins, which fail against a phone number takeover. - Switching it off for a shared account because it was inconvenient, which reopens the original hole. ## Why does multi-factor authentication matter? Most small-business breaches start with a password rather than anything sophisticated, and passwords get reused far more often than anyone admits. A second step makes a stolen one close to useless and turns an attack into an alert you can act on. For a business letting remote staff into its systems, it is the single control that does the most work. ## How does AssistBPO handle multi-factor authentication? Every AssistBPO assistant signs in to your systems through a named account protected by a second factor, from a managed device in a controlled workspace. We never ask you to send a password by email or chat, and we never work from a login shared between people. Where your tools support single sign-on we prefer it, because it keeps the whole access list under your control. [How we protect your business](https://assistbpo.com/security/)[Get a staffing plan](https://assistbpo.com/get-a-staffing-plan/) ## Related terms - [Least privilege access](https://assistbpo.com/glossary/least-privilege-access/) - [Background check](https://assistbpo.com/glossary/background-check/) - [Non-disclosure agreement](https://assistbpo.com/glossary/non-disclosure-agreement/) - [Offboarding](https://assistbpo.com/glossary/offboarding/) ## Where it is used - [How we protect your business](https://assistbpo.com/security/) ## Next in the A to Z - [Mystery shopping](https://assistbpo.com/glossary/mystery-shopping/) - [Nearshore staffing](https://assistbpo.com/glossary/nearshore-staffing/) - [Net Promoter Score](https://assistbpo.com/glossary/net-promoter-score/) - [No-show rate](https://assistbpo.com/glossary/no-show-rate/) [All 148 terms, A to Z](https://assistbpo.com/glossary/) Next step ## Your desk, staffed. Wherever you are. Tell us what is overloaded. A named person replies within 1 business day with a staffing plan, and we propose your assistant within 72 hours. [Get a staffing plan](https://assistbpo.com/get-a-staffing-plan/) [Book a 20-minute call](https://assistbpo.com/book-a-call/) Or call [+1-657-777-0006](tel:+16577770006) during US, UK or Australian business hours, or [hear our demo receptionist](https://assistbpo.com/demo-line/). - A named assistant proposed within 72 hours - Employed, screened and managed staff, never freelancers - Your hours, your tools, your data --- Source: https://assistbpo.com/glossary/multi-factor-authentication/ · Contact: https://assistbpo.com/contact/ · Full site map for agents: https://assistbpo.com/llms.txt