EDITS

Cyber Tips

Rolling out MFA without a staff revolt

Turning on multi-factor authentication across a business is a ten-minute change and a three-week people problem. Announce it on Monday for Tuesday and you will spend the month resetting accounts for people locked out of their own email.

Sequence and communication are the whole job.

Do this today
  1. Start with the accounts that matter most — administrators, finance, and anyone who can move money. Prove the process on a small group.
  2. Give people a choice of method and a written one-page guide with screenshots. Most resistance is uncertainty, not objection.
  3. Set a date, remind twice, and have someone available on the morning it becomes mandatory. The first hour generates most of the questions.
What good looks like

Coverage is complete, including shared mailboxes and service accounts — the ones everyone forgets because no single person owns them.

New staff get it during onboarding, so coverage does not quietly decay after the project ends.

Want someone to just do this for you? Start a conversation — twenty minutes, free.

Last reviewed: September 2026