Never rely on just a password, however strong it may be. Multi-factor authentication is essential for anyone who wants to protect their online accounts from intruders.
08 Oct 2025
October is Cybersecurity Awareness Month, a good time to pause and reflect on how you protect your digital world and your online accounts in particular. For many people, that’s still just a password.
But here’s the rub: Passwords alone are not enough to stand up to many of today’s common cyberthreats. This traditional first line of defense has grown dangerously thin over the years, as phishing attacks, data breaches and credential leaks make it easier than ever for cybercriminals to break into people’s online accounts, especially if their owners reuse the same or similar passwords across multiple accounts.
That’s where multi-factor authentication, or MFA, can make all the difference. By adding a second proof of identity, MFA can stop attackers in their tracks – even if they’ve stolen your password. Not all MFA options are born equal, however. While SMS-based MFA is far better than nothing at all, opt for an authenticator app wherever you can, or even for a hardware security key.
The same urgency applies to businesses. For organizations large and small, rock-solid MFA is a non-negotiable line of defense, as strong authentication protects systems, as well as safeguards customer trust, intellectual property, and reputation.
So, this October, make it a habit to enable MFA wherever you can and encourage your teams and colleagues to do the same. Also, learn about other forms of authentication that are become increasingly common such as passwordless authentication, including passkeys.
Watch the video with ESET Chief Security Evangelist Tony Anscombe to learn more and stay tuned for more videos to mark Cybersecurity Awareness Month, a campaign celebrated globally, including in the US, Canada, Australia and across Europe.
Also, why not learn about ESET’s cybersecurity awareness training?
Connect with us on Facebook, X, LinkedIn and Instagram.
