Cyber crooks count on people being busy. They hope you reuse passwords or click “approve” without thinking. Multi-factor authentication (MFA) makes that a lot harder for them. MFA adds a quick second step to prove it is really you when you sign in. For a small time tradeoff, you get a big upgrade in security.
Think of MFA like your front door. A password is the knob. MFA is the deadbolt. Even if someone guesses or steals your password, they hit a second lock that requires your phone, a code, or your fingerprint.
How MFA Works in Plain English
MFA asks for two or more of these:
-
Something you know: your password or PIN
-
Something you have: a one-time code from a text message or an authenticator app, a hardware key, or your phone for a push prompt
-
Something you are: a fingerprint or face scan
Use any two and a criminal with only your password is stuck.
The Most Common MFA Options
-
Texted one-time codes (SMS)
Easy and familiar. Works when you have cell service. SMS can be vulnerable to SIM-swap scams, so avoid sharing codes and consider an app if you can. -
Authenticator apps (time-based codes)
Apps generate a fresh 6-digit code every 30 seconds and do not rely on text messages or internet once set up. This is a strong, reliable choice for rural areas with spotty reception. -
Push notifications
A prompt pops up on your phone and you tap “approve.” Very convenient. If you ever get repeated prompts you did not request, do not approve. Change your password. -
Hardware security keys
A small USB or NFC device you tap to sign in. Very strong, often used by businesses and frequent travelers.
Learn more from CISA’s “Enable Multi-Factor Authentication” and the FTC’s explainer on MFA:
-
https://www.cisa.gov/secure-our-world/enable-multi-factor-authentication
-
https://consumer.ftc.gov/articles/multi-factor-authentication
Where to Turn It On First
Prioritize accounts that would hurt most if taken over.
-
Online and Mobile Banking
Enroll or sign in to FSB’s Online Banking and enable security features. Turn on account alerts so you see unusual activity quickly. -
Email
Your email is the reset key to many other accounts. Add MFA there next. -
Shopping, payroll, and social accounts
Anywhere you store payment methods, invoices, or private messages should have MFA.
For general safety reminders, visit our Security Information page.
Smart MFA Habits for Everyday Life
-
Never share a one-time code with anyone. FSB will not ask for your password or a code.
-
Prefer an authenticator app over text if it is offered.
-
Watch for “MFA fatigue” attacks where you get repeated push prompts. Do not approve. Change your password.
-
Keep backup codes in a safe place in case your phone is lost or replaced.
-
Moving to a new phone? Transfer your authenticator entries before wiping the old device.
-
Traveling or working fields with weak signal? Authenticator apps generate codes offline, which is handy when service is spotty.
-
Lock your phone with a passcode or biometric and keep software updated.
-
Turn on sign-in alerts in Online Banking so unexpected logins stand out.
What To Do if Something Looks Off
You receive a code you did not request or see a prompt you did not start.
-
-
Do not approve.
-
Change your password immediately.
-
Review recent activity in Online Banking and on your email.
-
Call us right away so we can help secure your account.
-
Consider reporting the attempt to the Internet Crime Complaint Center.
-
Small Business Corner
If you run a shop, farm, or side business, require MFA for email, online banking, payroll, invoicing, and any remote access tools. CISA’s Cyber Essentials is a helpful checklist.
The Bottom Line
Passwords alone are not enough anymore. MFA blocks most account-takeover attempts, and it only takes a few seconds. Turn it on for FSB Online Banking, your email, and any account that stores personal or payment information. If you need a hand, stop by our branch or give us a call. We are happy to help!
-
Set up or enroll: FSB Online Banking
-
Learn more about staying safe: FSB Security Information
