October 2, 2025
Capture

On 1st February, Salesforce made a big security-focused move by requiring all users to implement multi-factor authentication (MFA) to access its products, solutions, and platforms. As sophisticated cyberattacks continue their relentless pursuit on SMBs and enterprises, companies like Salesforce know that username and passwords no longer provide adequate security.

It has become clear that the best thing people and organisations can do to protect their online accounts and data from common threats like phishing and credential stuffing is using MFA – such as physical security keys like the YubiKey which require a physical touch after plugging in or tapping on a device to login to accounts.

The move by Salesforce is the latest in a trend of companies (as well as the US Government via the latest cybersecurity executive order) prioritising improvements to their cybersecurity infrastructure with MFA to better secure their customers, employees, and partners – including Google recently auto-enrolling 150 million Google users in two-step verification and requiring 2 million YouTube creators to turn it on.

Since 2007, Yubico (the creator of the YubiKey) has been a pioneer and thought leader around MFA – spearheading the adoption of security keys globally, making YubiKey as the key of choice for hardware security. Security keys, like the YubiKey, are widely seen as the gold-standard when it comes to preventing account takeovers and data breaches.

More information on this can be found here.