TABLE OF CONTENTS


Introduction


At Feefo, we prioritise the security and privacy of our customers' data. In line with our commitment to safeguarding sensitive information, we have implemented Multi-Factor Authentication (MFA) as an additional layer of protection for our login process. This article aims to guide users through the enhanced login experience and explain the importance of MFA in ensuring the integrity of their accounts.


What is Multi-Factor Authentication (MFA)? 


Multi-Factor Authentication (MFA) is a security measure that requires users to provide multiple forms of verification to access their accounts. Typically, MFA combines something the user knows (such as a password) with something they have (such as a mobile device) or something they are (such as biometric data). By requiring multiple factors for authentication, MFA significantly reduces the risk of unauthorised access, even if passwords are compromised.


Why Implement MFA in Feefo's Login Experience? 


The decision to implement MFA in Feefo's login experience stems from our commitment to data security. As cyber threats continue to evolve, it's essential to stay ahead of potential risks and fortify our defences against unauthorised access attempts. MFA adds an extra layer of security, making it significantly more challenging for malicious actors to compromise user accounts, even if they obtain login credentials.


What Authenticator Should I Use?


When it comes to authenticators, you have the option of browser-based solutions or dedicated apps. Both options are dependant on your device and OS.

Below, we highlight a few apps, each offering unique benefits to suit different user preferences. Click the links to download the apps.


 Google AuthenticatorGoogle Authenticator is a straightforward and widely-used two-factor authentication app developed by Google. It generates time-based one-time passcodes (TOTPs) for added security when logging into online accounts. While it lacks some advanced features like account syncing and backup, it excels in simplicity and reliability. Available on both iOS and Android platforms, Google Authenticator is a popular choice for users prioritising offline operation and straightforward authentication.
AuthyAuthy is a robust two-factor authentication app that offers advanced features for enhanced security and convenience. Developed by Twilio, Authy supports multiple account syncing across devices, cloud backups with encrypted storage, and additional protection through a PIN. Unlike Google Authenticator, Authy provides flexibility by allowing users to access their authentication codes from multiple devices. With support for time-based and one-time passcodes, Authy is suitable for users seeking a versatile and user-friendly authentication solution.
Microsoft AuthenticatorMicrosoft Authenticator is a comprehensive two-factor authentication app designed to integrate seamlessly with Microsoft accounts and services. In addition to generating time-based and one-time passcodes, it offers biometric authentication support and cloud syncing capabilities with Microsoft accounts. With cross-platform availability on iOS, Android, and Windows devices, Microsoft Authenticator prioritises security while providing a convenient and intuitive authentication experience tailored to Microsoft ecosystem users.

How Does MFA Work in Feefo's Login Experience? 

  1. When users attempt to log in to their Feefo accounts, they will encounter an additional step in the authentication process. 
  2. After entering their username and password, they will be prompted to provide a second form of verification. 
  3. Open your preferred authenticator app, add a new account and scan the QR code to add it to your app. This will only occur the first time you set up MFA.
  4. Now enter the unique code generated.


Alternative method

  1. When users attempt to log in to their Feefo accounts, they will encounter an additional step in the authentication process. 
  2. After entering their username and password, they will be prompted to provide a second form of verification. 
  3. If they don't have an authenticator app they can choose try another method and opt to receive a code via email.
  4. A 6 digit verification code will be emailed from feefo@feefo.com.
  5. Enter this code to open the hub.




Benefits of MFA in Feefo's Login Experience

  • Enhanced Security: MFA significantly reduces the risk of unauthorised access by requiring multiple forms of verification.
  • Protection Against Credential Theft: Even if a user's password is compromised, unauthorised access is thwarted without the second factor of authentication.
  • Compliance: MFA aligns with industry best practices and regulatory requirements, demonstrating Feefo's commitment to data security and compliance.
  • User Confidence: By implementing robust security measures like MFA, we instil confidence in our users, assuring them that their sensitive information is well-protected.

Summary


Multi-Factor Authentication (MFA) enhances the security of Feefo's login experience by requiring users to provide multiple forms of verification before accessing their accounts. By implementing MFA, Feefo demonstrates its commitment to protecting customer data and staying ahead of evolving cybersecurity threats.