Forest Global Training Partners

Cyber Risks · Cisco Talos

The best and worst ways to get users to improve their account security

Summary: A Cisco Talos writer describes Yahoo forcing an account security review at login, flagging a "less secure" password and missing multi-factor authentication, then walking him through a password update in under a minute and passcode MFA enrollment in about two minutes. He argues mandatory MFA enrollment beats optional prompts, and criticizes sites that let users click away from the enrollment screen or fail to honor "Remember Me" settings.

Bottom line: The author notes he would not have thought twice about that account's security without the interstitial screen, which is the gap a security leader faces when enrollment is left voluntary rather than made mandatory.

Read the original at Cisco Talos ↗

Topics
Identity & Access Management
Related