3 min readTutorial
Turn on MFA for Microsoft 365 before the next phish
By Michael NarehoodMicrosoft 365
A practical path to require multifactor authentication in Microsoft 365 for a small business, without locking everyone out on Friday afternoon.
#mfa
4 articles
1 min read
Passkeys for business admins
Why phishing-resistant MFA belongs on privileged accounts first, and how to start small.
1 min read
Why SMS MFA is a stopgap
SIM swaps and SS7 abuse make text-message codes weaker than app-based or FIDO MFA.
1 min read
MFA fatigue and how to stop push bombing
Attackers spam approve prompts until someone taps Yes. How number matching and better MFA choices help.