Two-Factor Authentication (2FA) and The Risks of Turning It Off

What is 2FA?

Two-Factor Authentication (2FA) is a second authentication method that is used after a username and password for an account is entered correctly. It acts as a second layer of security since it further verifies the identity of the person the account belongs to.

2FA differentiates from Multi-Factor Authentication (MFA) in that MFA requires two or more authentication methods, whereas 2FA refers to only using one additional authentication method. Despite this difference, 2FA and MFA are often used interchangeably. Common authentication methods for 2FA and MFA include:

• Authenticator apps
• Email and text codes
• Biometric authentication (e.g. Face ID)
• Security questions
• Physical security key

What Happens When 2FA is Disabled?

When 2FA is disabled from an account, all that is needed to access the account is the username and password – further authentication is no longer required to successfully log in. It’s important to understand that when 2FA is disabled, it becomes easier for a cybercriminal to use a phishing technique, password cracking technique or successfully guess your password to compromise your account.

Common Reasons People Want to Disable 2FA With Solutions
There are several reasons why someone would want to disable their 2FA, however, it is not recommended to do so. Here are a few reasons why people disable their 2FA:

• Difficult for users
• Increased time it takes to log in
• Inconvenience
• Don’t see why or how 2FA is necessary

The Importance of Enabling 2FA on Your Accounts
At Gimmonix, 2FA is automatically enabled on all accounts, and here’s why it is important:

Adds a second layer of security
With only a username and password, it only takes one password attack or break to place your account at risk. However, with 2FA enabled, you’re given an additional layer to secure your account.

Reduce password security risks
Reusing passwords across multiple accounts has become an extremely common password habit for many. When duplicate passwords are used, it makes it easy for cybercriminals to compromise accounts; but with 2FA enabled, the cybercriminal will have to authenticate who they are before being able to log in.

Despite the extra layer of security that 2FA adds, it’s still crucial that you practice good password hygiene by creating passwords that are strong and unique. With good password hygiene and 2FA enabled on your accounts, it becomes almost impossible for a cybercriminal to compromise and steal your data.

Think Twice Before Turning Off Your 2FA

If a client insists, we will deactivate 2FA - but before you decide to turn off 2FA, think carefully about the risks that come along with doing so. When it comes to 2FA, security outweighs inconvenience – so keep that top of mind before disabling 2FA on any of your accounts.

Just as with your bank account, you want your Gimmonix account secure. Access to your Gimmonix account allows one to make multiple hotel reservations, potentially up to thousands of dollars worth.

Don’t turn off your 2FA due to inconvenience – consider a password manager that will help make logging into your accounts a seamless process with 2FA storage and auto-filling capabilities.

By requesting that Gimmonix deactivates 2FA for one or more accounts, clients assume full responsibility, risk and liability for any damages as a result of the weakened security access to your account.