Protect your accounts with Multi-factor Authentication

Password theft and online account compromise is one the biggest risks we all face in today’s increasingly connected world. Passwords and secret questions/answers are no longer enough to protect online accounts because they are easily stolen via phishing, as we learned last week, and viruses. A better protection is to use “multi-factor authentication” (MFA), also known as “two step verification”, requiring anyone trying to get into your account to not only know what your password is, but also have physical access to something you own, such as a mobile phone or token.

Did you know? Faculty and staff can “opt-in” to enforce Duo multi-factor authentication (MFA) on UCI WebAuth and/or Office 365 logins.

Do you use UCI G Suite? Google offers their own solution: https://www.google.com/landing/2step/
Looking for solutions for your personal accounts? Check: https://twofactorauth.org/

While these are optional services, we highly recommend you take advantage of them. It completes our “one-two punch” of reducing the risk of account compromise:

  1. protecting your account with multi-factor authentication on all services that support it
  2. reviewing your account activity for suspicious behavior (https://security.uci.edu/my-account-activity.html)

Learn to protect yourself and UC during National Cyber Security Awareness Month

October is National Cyber Security Awareness Month (NCSAM) and a good time to remind ourselves that the information and systems we use to carry out UC’s mission of teaching, research, and public service must be safeguarded.

Cybersecurity resources

Isaac Straley
Chief Information Security Officer-Risk and Compliance
Office of Information Technology

Joshua Drummond
Chief Information Security Officer-Technology and Operations
Office of Information Technology

Information Security & Privacy Committee