How to use multi-factor authentication to combat cyber-crime

The Australian Signals Directorate lists multi-factor authentication as one of the eight essential security protection mechanisms that a user needs to implement to combat cyber-crime. But how do you turn it on for your personal online accounts such as LinkedIn, Facebook, Instagram, Gmail and iCloud? And how does turning it on for personal accounts protect the corporate environment?

To access most systems, people simply enter a username and a password. As usernames can be commonly known (such as an email address), the password is the only security credential that is known solely by the user.

This username/password combination is known as single factor authentication. Single factor authentication becomes problematic, however, when an attacker has your password. An attacker could obtain your password in any number of circumstances, for example: