Tip 1

Two-factor authentication: a must-do!

October is European Cyber Security Month, and to mark the occasion, the Belgian Cyber Security Centre, together with Febelfin and the Cyber Security Coalition, is launching a new awareness campaign to encourage everyone to use two-step verification or multi-factor authentication (MFA).

We at Savaco couldn’t agree more, as the vast majority of cyber breaches can still be traced back to a stolen or weak password. Two-factor authentication helps to better protect your data by adding an extra step to the login process. MFA requires users to prove they are who they claim to be in more than one way, by combining different identification factors:

  • Something you know: a password, PIN, the answer to a security question, etc.
  • Something you have: a physical object you must have with you when you log in, such as a card reader or your smartphone on which you receive, for example, an SMS code
  • Something you are: a biometric factor, such as a fingerprint or facial recognition on your smartphone.

With this campaign, the CCB aims to encourage all Belgians to use two-factor authentication. To launch their campaign, the CCB set out on a mission to Belgium’s smallest municipality, Herstappe, to teach all its residents how to use two-factor authentication.

Tip 2

Use a password manager

Two-factor authentication is therefore definitely a must for protecting your (business) accounts and those of your employees. However, even MFA can now be bypassed using sophisticated phishing techniques, as you may have read in this blog. That is why we would like to share a few more tips to help protect your online identity and that of your colleagues.

In addition to MFA, a password manager is also an accessible and user-friendly way to provide extra protection for passwords and online accounts. A password manager is a digital vault where you can securely store and manage all your login details for local applications, websites, online shops or social media. This means you only need to remember one password to access all the tools, websites and the like for which you have a login. There are various tools available for managing passwords, but we believe Keeper offers the most benefits in a business context.

Tip 3

Role-based Access

With MFA and a password manager, anyone can take steps towards a more secure online identity (whether personal or professional). As an IT administrator, you can protect your staff and your data with role-based access to applications and data. With role-based access, you can grant each employee the appropriate permissions based on their role. This allows you to control who has access to specific data and applications. Role-based access is a key part of the onboarding and offboarding process within your organisation. When a new employee joins, ensure the correct permissions and accounts are set up; and deactivate them immediately upon departure.

Microsoft Entra ID (formerly Azure Active Directory) is the tool that allows you to manage and simplify your employees’ accounts. With Entra ID, you can also implement single sign-on for your business applications. This immediately reduces the number of passwords your employees need to remember.

The end of passwords?

The future: password-free identity

Today, passwords are still essential for protecting your identity and that of your employees, but we are gradually moving towards a world in which ‘passwordless’ authentication is becoming the norm. With a passwordless identity, you authenticate yourself via fingerprint, facial recognition or a unique code generated on your smartphone, and you no longer need a password to prove your identity. Technology companies are already hard at work preparing for and facilitating this evolution, but it will easily take another 10 years before the necessary technology is available on every device and every website. In the meantime, we’ll have to make do with our many passwords for a little while longer. Until then, our password manager helps us keep all passwords that don’t fit into Entra ID secure.

Can we help you?

Need help implementing two-factor authentication, role-based access, or a password manager in your organisation? Our security experts will be happy to assist you.