#Workflowy security software#
#Workflowy security password#

User experience has become the top obstacle to using MFA. If this doesn’t sound fun, it’s because it isn’t.

#Workflowy security password#

Let’s take a look at that employee again, who’s having to authenticate with a password and wait for an SMS OTP every time they need to log into a different app – over the course of the day, this could mean several dozen authentication attempts, some of which may have delayed codes or issues with network connection or a forgotten password. The reality is that mobile authenticators can still be phished – even if some are more secure than others. The belief that mobile authentication is secure is a key misconception we see related to mobile-based authenticators. In fact, only 22% of respondents we surveyed are aware that security issues such as these even exist with SMS-based authentication. It may seem far-fetched, but few organizations are aware of the fact that SMS-based OTP only blocks about 76% of today’s targeted attacks. In this example, I (as the employee) have no idea I have been phished or that my credentials have been successfully intercepted. Except, the process was not normal – it was a successful phishing attempt that resulted in an account takeover: That email asked me to click a link and log into Gmail as per normal. Let’s say, in this case, it began with an authentic looking request from the support team with a request to test connectivity for my Gmail. Modern phishing attacks can intercept that username and password combo as well as the OTP. Well, that’s where looks can be deceiving. Sometimes there’s a delay with the OTP coming through to my phone or sometimes I have to dig around for the right username and password for an app I may not use as frequently.įrom a security perspective, it looks pretty good – right? Each login has two steps of protection. I may have to repeat this process after a period of inactivity or if I navigate to a different corporate app in the network if Single Sign On (SSO) is not deployed. I open up my laptop, log into the device, then navigate to Salesforce where I’m presented with this workflow:

It’s the start of my day and I’m ready to log in to see who has responded to my latest sales cadence. Assume that you are a junior sales employee working from home, who needs to access Salesforce, which is protected with SMS-based OTP for 2FA: Further, the average company loses $5.2 million annually in productivity due to account lockouts – and password costs such as these only represent the first factor in 2FA and MFA.Īs a security lead that oversees digital security across your business, sometimes it’s good to step into your user’s shoes.

#Workflowy security software#

For example, if you are requiring your employees to use mobile-based MFA, you may have to take on the costs for that device, recurring service costs, enterprise device management software and more. While mobile authentication is relatively inexpensive to roll out, most organizations can experience hidden costs, productivity losses, and support issues.

What’s happening? How is it that you’re spending more to support 2FA and MFA without a net benefit in security? In fact, 74% of organizations attribute recent cyber attacks to remote work vulnerabilities. Yet today, organizations continue to experience cyber attacks that penetrate their defenses. But with remote and hybrid work likely to continue in 2022 and beyond, it’s time to step back and ask: is my in-use authentication as secure as I think it is? Is it phishing resistant? And what is it really costing my organization?īecause of COVID-19, organizations may have chosen the quickest route to get users set up with 2FA/MFA, leveraging mobile authentication methods such as SMS-based OTP or authenticator apps because they were easy to deploy and supported by the ubiquity of mobile devices. COVID-19 initiated the most rapid digital transformation ever witnessed-organizations fast-tracked two-factor and multi-factor authentication to transition millions of employees to work from home.