Showing 1–6 of 6 articles
Account recovery that can walk around the second check
Strong sign-in protection can be undermined by a weaker recovery process. Review every way to regain access, including support-assisted changes and replacement recovery details.
Read the visual guide
How a support desk should handle a caller who sounds legitimate
Knowing an employee’s name, manager, or urgent problem does not prove identity. Use an approved verification process before resetting access or changing recovery details.
Read the visual guide
What multi-factor authentication is, in plain language
Multi-factor authentication combines different kinds of proof. Choose an appropriate method, protect recovery routes, and learn how to handle a request you did not initiate.
Read the visual guide
How to start using a password manager
A password manager helps you use a different strong password for each service. The first task is protecting the vault and making sure you can recover access to it.
Read the visual guide
MFA push fatigue: what to do with unexpected approval requests
Repeated sign-in prompts can pressure someone into approving access they did not start. Treat an unexpected approval request as a signal to stop, verify, and investigate.
Read the visual guide
Stolen passwords: stop credential stuffing across every login route
An attacker can reuse a stolen password through more than the main sign-in page. Review mobile APIs, legacy access, and recovery routes alongside the login form.
Read the visual guide