Passwords and MFA: The Cheapest Security Upgrade Your Business Can Make

Passwords and MFA: The Cheapest Security Upgrade Your Business Can Make

Most small-business break-ins don’t start with a hacker in a hoodie. They start with one reused password — the same one an employee used for email, a supplier portal and a personal account that got leaked years ago. Once that password is out, every account that shares it is open.

The fix is cheap, fast and unglamorous: unique passwords, stored properly, plus multi-factor authentication (MFA). Here’s how we set it up for local businesses.

One password per account — stored in a password manager

Nobody can remember forty strong passwords, so people reuse five. A password manager removes the excuse: it generates and stores a different password for every login, and your team only remembers one master password. Business plans cost a few dollars per user per month and pay for themselves the first time an account doesn’t get breached.

Turn on MFA — email and banking first

MFA means a login needs a second step, usually a code from an authenticator app on your phone. Even if a password leaks, the account stays locked. Turn it on in this order:

1. Email — it’s the reset key for almost everything else
2. Banking and accounting
3. Microsoft 365 / Google Workspace admin accounts
4. Social media and anything client-facing

Use an authenticator app rather than text messages where you can — it’s stronger and doesn’t depend on cell service.

Shared logins are a liability

If three people share one login, you can’t tell who did what, and you can’t revoke one person’s access when they leave. Give everyone their own account, turn on MFA for each, and removing access becomes a one-minute job instead of a password-changing panic.

What it costs to have it done

The tools themselves are inexpensive. Our time to set up a password manager, migrate your logins and switch on MFA across a small team is billed at the usual $50/hour — for most small offices it’s a single visit, and ongoing protection is covered under Managed PC Care if you’re on it.

Want it handled?

Call 604-328-8757 or email service@ithings.ca. We’ll audit your current setup and lock down the important accounts first — no jargon, no oversell.

iThings Service — local IT support in Salmon Arm and the BC Interior. $50/hour, 7 AM–11 PM daily.