Multi-factor authentication
A stolen password shouldn’t be enough
Passwords get phished, guessed and leaked in other companies’ breaches every day. Multi-factor authentication (MFA) adds a second check, usually a tap on your phone, so a stolen password on its own gets an attacker nowhere. It’s the single most effective security step most businesses can take.
- Microsoft Partner
- Cyber Essentials certified
- 5.0 on Google
Options
The right second factor for each person
-
Authenticator app
A quick approval with number matching on a phone. Our default for most staff.
-
Passkeys & Windows Hello
Face or fingerprint sign-in that can’t be phished. Ideal for laptops.
-
Hardware security keys
A small USB/NFC key for admins, shared devices or staff without work phones.
-
Trusted locations
Conditional access that asks less often in the office and more when something looks unusual.
Rollout
MFA without the Monday-morning lockouts
MFA projects go wrong when they’re switched on overnight: people are locked out, the director’s phone is in a drawer, and shared accounts stop working. We roll it out in stages, with clear instructions and a helping hand for anyone who gets stuck.
- Audit accounts, shared mailboxes and apps that need special handling
- Short guide and drop-in help for staff to register their method
- Admins and directors first, then everyone else in groups
- Legacy sign-in methods that bypass MFA switched off
- A documented process for lost or replaced phones
MFA rollout
Example 22-person team
Where to switch it on
Email first, then everything with a login
Microsoft 365 is the priority because it’s where most attacks start. Then banking and payment platforms, accounting software, remote access, your website admin and any cloud service holding customer data. We’ll list them with you and tick them off.
FAQ
MFA questions
Can’t see your question? Call 01843 482 279 or email hello@squareoneit.co.uk. You’ll get a straight answer from an engineer.
Is MFA really that effective?
Yes. Microsoft’s own research has repeatedly shown that MFA blocks the vast majority of automated account attacks. It isn’t perfect, as some phishing kits try to capture codes, which is why we use number matching, phishing-resistant methods and conditional access.
What if a member of staff doesn’t want to use their personal phone?
That’s reasonable. A hardware security key or Windows Hello on their work laptop works well, with no personal device needed.
What happens if someone loses their phone?
They call us. We verify who they are, reset their MFA and help them register a new device, usually within minutes during office hours.
Does Cyber Essentials require MFA?
Yes. Cyber Essentials requires MFA on cloud services wherever it’s available, which includes Microsoft 365.
Make stolen passwords useless
We’ll plan and run your MFA rollout so it’s secure, sensible and painless for your team.
- Call the team01843 482 279
- Emailhello@squareoneit.co.uk
- VisitKent Innovation Centre, Thanet Reach Business Park, Broadstairs CT10 2QQ
- Helpdesk hoursMonday to Friday, 9am – 5pm