If your business relies on email, cloud software, or online banking — and virtually every business does — then the security of your accounts is critical. And yet, the vast majority of small businesses still rely on passwords alone to protect them.
The problem? Passwords are not enough.
The Problem with Passwords
Passwords get stolen in data breaches, guessed by automated tools, phished by convincing fake emails, and reused across multiple accounts. According to Verizon's Data Breach Investigations Report, over 80% of hacking-related breaches involve compromised or weak passwords.
Once a cybercriminal has your password, they have access to everything behind it — your emails, your files, your customer data, and potentially your finances.
What Is Two-Factor Authentication?
Two-factor authentication (2FA) adds a second verification step when you log in to an account. Even if someone has your password, they still can't get in without the second factor — which is typically a code generated by an app on your phone, or a notification you have to approve.
Think of it like a bank card: the card is your password, and the PIN is your second factor. Both are needed to access your account.
Why It Matters for Small Businesses
Small businesses are increasingly targeted by cybercriminals precisely because they often have weaker security than larger organisations. A successful account takeover can result in:
- Loss of access to your email and business tools
- Theft of customer data (with potential GDPR consequences)
- Financial fraud via compromised banking or payment accounts
- Ransomware attacks launched from a compromised account
- Reputational damage if your email is used to send phishing messages to your contacts
Which Accounts Should Have 2FA?
At a minimum, you should enable 2FA on:
- Your business email account (Gmail, Outlook, etc.)
- Microsoft 365 or Google Workspace
- Your website and hosting control panel
- Online banking and payment platforms
- Any cloud storage (OneDrive, Google Drive, Dropbox)
- Social media accounts
How to Get Started
Setting up 2FA is straightforward on most platforms — it usually takes just a few minutes per account. We recommend using an authenticator app (such as Microsoft Authenticator or Google Authenticator) rather than SMS codes, as app-based 2FA is more secure.
If you'd like help getting 2FA set up across all your business accounts, our Two-Factor Authentication Setup service covers everything from email to cloud tools — remotely or on-site across the UK.