If you’re a regular reader of our blog, you’ll know that here at Centrify, we’re big believers in multi-factor authentication (MFA) and strong supporters of MFA Everywhere. Passwords don’t protect us, our data or our businesses – and we need something better.
As an extension of our commitment to eradicate passwords wherever possible, and bolster security with MFA wherever we can, we’ve extended our “MFA Everywhere” initiative with a key new “where” – 2FA for Windows logon.
Speed and Security
We can hear the cries now: “2FA! Windows Logon! Won’t that slow all my users down?” Not if the second factor can be easy and use devices employees already have. Don’t believe me? Have 30 seconds to spare for a video? Good. Watch director of product management (and frequent Centrify blogger), Jonathan Bensen log in to his Windows laptop:
Pretty easy, huh? Works offline too. Not bad.
Half-Protected is Half Not
Windows makes up the vast majority of laptop and desktop operating systems “in the wild,” and a huge chunk of server OS as well. In business – we tie Windows authentication back to Microsoft Active Directory. (With Centrify, we do the same for Mac, iOS, Android, Linux, Unix and much more!) We manage user accounts tightly. We manage authorization on endpoints to prevent users from having too much administrative privilege. We control app usage and network access… We lock it all down…With a password.
A password! Easily cracked. Easily guessed. Easily bought on the dark web for pennies.
It’s not enough. Which is why adding 2FA to Windows logon is so key. Thanks to Centrify’s support for flexible factors, employees and admins can use their mobile phone, existing OTP tokens, YubiKeys and more to get easy access to their machines.
The Weakest Link
Two-factor auth, and MFA in general, is a key part of protecting against password-based attacks. But it’s only part of the solution. Endpoints must be protected, but so too must apps, servers and infrastructure. Centrify provides policy and security across your business, to thwart attacks – without slowing your users.
And this is just the beginning of the story! The video above shows how fast and easy Windows 2FA can be. Stay tuned to see how MFA + SSO can increase security and eliminate hurdles for users.
Learn more about MFA Everywhere or start a trial on the Centrify MFA solutions site.