{"id":43840,"date":"2021-08-23T15:00:00","date_gmt":"2021-08-23T19:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=43840"},"modified":"2024-01-26T15:24:05","modified_gmt":"2024-01-26T20:24:05","slug":"push-notification-mfa","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/push-notification-mfa","title":{"rendered":"Using Push Notifications for MFA"},"content":{"rendered":"\n
Multi-factor authentication (MFA<\/a>) is now one of the core methods for securing user access to IT resources, and a critical component of a Zero Trust<\/a> security model. With the rise of remote work and the continued prevalence of high-profile data breaches, many organizations are evaluating their options for implementing MFA policies. <\/p>\n\n\n\n According to a recent survey of IT professionals<\/a>, 52.6 percent of small and medium-sized enterprises already require MFA across all applications and logins. This article is geared towards the remaining organizations trying to figure out the best way to do that while avoiding resistance from decision makers and end users. <\/p>\n\n\n\n An excellent option for a frictionless MFA experience is push notification-based MFA, but how does it compare to other implementation options?<\/p>\n\n\n\n Multi-factor authentication (also called two-factor authentication or 2FA<\/a>) is the practice of requiring an additional factor beyond the standard username\/password combination requested at most logins. Oftentimes, these factors are colloquially known as:<\/p>\n\n\n\n According to Verizon\u2019s 2021 Data Breach Investigation Report, 61% of data breaches<\/a> involve credentials. When used as a single factor, passwords are an insufficient security measure<\/a> and unable to protect your organization from the costs of a data breach. Layering on a second authentication factor at login is significantly more secure than relying on passwords alone, and can make accounts 99.9% less likely<\/a> to be compromised.<\/p>\n\n\n\n So how much of an effect does the type of additional factor have? Well, Google\u2019s Security Blog studied the effects of MFA on account takeovers<\/a>. Here\u2019s what they found:<\/p>\n\n\n\nWhat is MFA & Why Should You Use It?<\/h2>\n\n\n\n
\n