To read a more general FAQ on MFA in MX, click here.
A password alone is only a single factor of authentication which can be compromised in a number of ways; sharing a password, a (shared) password that has been leaked elsewhere or simply by someone taking control of your email account and performing a password reset.
Two-Factor authentication (2FA, adding one more security check) or Multi-factor authentication (MFA, providing multiple additional security checks) add an extra layer of security to an online account, driven by something that you have in your possession, i.e. a SMS or a random 6-digit code.
Examples of extra authentication methods are text message (SMS), a code generated from a mobile device or a security token (USB stick). SMS are generally considered a poor option because phone numbers can be spoofed and guaranteeing SMS delivery is difficult to do in certain countries.
By adding a second factor of authentication, your password alone is not enough to gain access to your MX account. Someone needs both your password AND the code from your authenticator app (on your phone).
The code is comprised of a random 6-digit code that changes every 30 seconds. This must be entered every time you log in to your online account (i.e. MX).
The MFA information above is true of all online accounts secured by a password alone and the MX team would recommend you add MFA / 2FA to any accounts that have access to sensitive / business data.
Please note.
1) Your IT team will tell you if there is a preferred authenticator app you should use.
2) MX will work with most authenticator apps.
3) If you are not able / willing to install an authenticator app on a mobile device, you can install an app to your laptop / desktop computer.
4) You must keep the authenticator app installed on your device; if you delete it, you lose the ability to log-in to MX.
5) If you are moving to a new phone, you must reset your MFA status and then go through the setup process again on your new phone.
6) Please record backup codes so that you always have a means of accessing MX.