{"id":1612,"date":"2026-10-14T01:16:35","date_gmt":"2026-10-14T06:16:35","guid":{"rendered":"https:\/\/cmitsolutions.com\/sanmarcos-tx-1047\/?p=1612"},"modified":"2026-10-13T01:23:07","modified_gmt":"2026-10-13T06:23:07","slug":"multi-factor-authentication-explained-without-the-acronyms","status":"publish","type":"post","link":"https:\/\/cmitsolutions.com\/sanmarcos-tx-1047\/blog\/multi-factor-authentication-explained-without-the-acronyms\/","title":{"rendered":"Multi-Factor Authentication Explained Without the Acronyms"},"content":{"rendered":"

If your front desk has one computer that three or four people log into across the day,<\/span> multi-factor authentication<\/span><\/a> can feel like more trouble than it\u2019s worth. It doesn\u2019t have to be. Set up properly, it\u2019s one of the most valuable security changes a clinic, hotel, law office, or any small business can make.<\/span><\/p>\n

You\u2019ll also hear it called MFA, two-factor, 2FA, or two-step verification. They all mean the same thing.<\/span><\/p>\n

The plain version<\/b><\/h2>\n

Normally, a password is all it takes to get into an account. Multi-factor authentication adds a second step, usually a quick check on your phone. So even if someone steals a password, they still can\u2019t get in.<\/span><\/p>\n

The three common options<\/b><\/h2>\n
    \n
  1. An approval prompt in an authenticator app. You sign in, your phone buzzes, you confirm. This is the right default for most businesses.<\/span><\/li>\n
  2. A six-digit code from an app. Just as secure, with a little more typing. A good backup.<\/span><\/li>\n
  3. A code sent by text message. Better than nothing, but weaker, because a phone number can be moved to another device. Use it only as a fallback.<\/span><\/li>\n<\/ol>\n

    For admin accounts and anyone who can move money, a physical security key that plugs into a laptop or taps against a phone is the strongest option.<\/span><\/p>\n

    \"\"<\/p>\n

    Shared computers need their own plan<\/b><\/h2>\n

    A front-desk computer used by several people across different shifts can\u2019t be set up like a laptop one person takes home every night. If you treat them the same, people end up sharing logins or approving each other\u2019s prompts, and the protection disappears.<\/span><\/p>\n

    The fix is to set up shared computers differently instead of leaving them at the default. Clinics, hotels, and law offices around San Marcos and New Braunfels all run into this, and it\u2019s very solvable.<\/span><\/p>\n

    Turn on number matching<\/b><\/h2>\n

    If an attacker has someone\u2019s password, they can keep sending login prompts until a busy employee taps \u201capprove\u201d just to make it stop. It\u2019s called<\/span> MFA fatigue<\/span><\/a>.<\/span><\/p>\n

    Number matching fixes it. The login screen shows a two-digit number the employee types into the app, so you can\u2019t approve it by accident, and you can\u2019t approve it at all unless you\u2019re the one logging in. If you already use multi-factor authentication, check that this is turned on.<\/span><\/p>\n

    <\/p>\n

    Where to turn it on first<\/b><\/h2>\n