Passwords Aren’t Enough to Secure Veteran Accounts–Enable MFA Today

U.S. Department of Veterans Affairs — Fri, 27 Oct 2023 09:33:52 -0400

In today's digital landscape, taking steps to secure your data is more critical than ever. Whether you’re signing in to manage your benefits, review a medical report, or simply schedule an appointment, bad actors are constantly seeking access to your accounts.

Millions of Veterans accessing your VA benefits, services, and information online are now using an extra layer of online protection due to one simple yet potent method—multi-factor authentication (MFA). But the work is not done. More than half of VA Health and Benefits mobile app users and almost 90 percent of Login.gov accounts and VA.gov signed-in users still need the added security that MFA provides.

MULTI-FACTOR AUTHENTICATION

You’ve probably been told to create long complicated passwords. Or perhaps you have a password manager to help keep your login information organized. While these are valuable practices, they are not enough to protect your data.

Enter multi-factor authentication. Also known as two-factor authentication, MFA is an additional security layer that guarantees it’s you who wants in. With multi-factor authentication enabled, every time you sign in, you’ll receive a verification request on a
personal device to which only you have access.

MFA’s IMPACT BY THE NUMBERS

Over the past year, Veterans have taken proactive steps to bolster their VA online data security when using Login.gov and whenever signing in to VA.gov and the VA Health and Benefits mobile app. The number of Login.gov accounts with MFA enabled has more than doubled, surging from 430,000 MFA users to nearly 1.1 million. The result? Over 650,000 fewer entry points for cyber threats to exploit.

There’s a similar trend among VA.gov and VA Health and Benefits mobile app users. As of July 2023, nearly 750,000 VA Health and Benefits App users and approximately 1.8 million VA.gov users have multi-factor authentication enabled. When combined with Login.gov, that’s over 3.6 million accounts or users that are now off-limits to cyber
threats.

TAKE CHARGE OF YOUR DATA

In just a matter of minutes, you can bolster your cybersecurity with multi-factor authentication. This simple step can make all the difference between tranquility and the turmoil of falling victim to fraudulent activities. You have the power to thwart cyber
threats.

Enable MFA today to safeguard your data against malicious actors.

Watch VA’s video on multi-factor authentication https://rly.pt/MFAVideo.

For the latest cybersecurity tips, bookmark and regularly visit the Cybersecurity Spot athttps://rly.pt/CyberSecuritySpot

By VA Office of Information and Technology

Protect Your Information With Multifactor Authentication

The U.S. Department of Veterans Affairs takes protecting your online information seriously — and we know you do too. That’s why when you use VA websites and ...

Response by SGT Private RallyPoint Member made Oct 27 at 2023 5:33 PM

SGT Private RallyPoint Member — Fri, 27 Oct 2023 17:33:38 -0400

thanks for the share.

Response by SGT Ruben Lozada made Oct 28 at 2023 3:55 PM

SGT Ruben Lozada — Sat, 28 Oct 2023 15:55:10 -0400

Good afternoon. Excellent post. Thank You for sharing this on RP.

Response by CPT Edward Baker made Oct 28 at 2023 6:21 PM

CPT Edward Baker — Sat, 28 Oct 2023 18:21:41 -0400

I think one thing that should be considered is the use of CAC cards. We are already issued VA Id cards that can be replaced by CAC cards. This would also allow for the storage of Important VA documents that could be accessed, when needed, trough the CAC reader. Having a Digital DD214, and VA letters would save time if stored on the CAC card. Also important medical information such as allergies, Diabetes and blood type could be stored on the card allowing for doctors to access that information in an emergency situation. I believe that the CAC card paired with a finger print reader would be the most effective way of Securing our accounts.

Response by SSgt Private RallyPoint Member made Oct 29 at 2023 12:37 AM

SSgt Private RallyPoint Member — Sun, 29 Oct 2023 00:37:44 -0400

Did you know that a password and most MFA can be cracked by a good hacker? Passwordless is the next generation in Identity Control. MFA is decades old now.

Response by Cpl Lisa Kreiser made Nov 3 at 2023 5:48 PM

Cpl Lisa Kreiser — Fri, 03 Nov 2023 17:48:05 -0400

Outstanding post.

Response by SFC Joe S. Davis Jr., MSM, DSL made Nov 4 at 2023 12:03 AM

SFC Joe S. Davis Jr., MSM, DSL — Sat, 04 Nov 2023 00:03:24 -0400

THANKS FOR SHARING

Response by SFC William Stephens A. Jr., 3 MSM, JSCM made Nov 8 at 2023 9:18 AM

SFC William Stephens A. Jr., 3 MSM, JSCM — Wed, 08 Nov 2023 09:18:19 -0500

WORKING SECURITY ADMIN SIDE OF THE HOUSE FOR 17 YEARS. I DON'T CARE WHAT SECURITY BLOCKS YOU BUY OR HAVE INSTALLED ON YOU OPERATING SYSTEM. IF BIG BROTHER WANTS TO SEE WHAT YOU HAVE GOING ON, BIG BROTHER WILL FIND A WAY TO VIEW EVERYTHING YOU SEE AND DO.

YOU TELL ME HOW THESE KIDS ARE HACKING IN TO TOP SECERT GOVT DATA CENTERS. AND NOW THERE THIS BIG STORY OUT THERE ABOUT THIS HUGH BREECH ON PII/PHI AND ALL PRIVATE INFORMATION ABOUT SERVICE MEMEBERS AND THEIR CLEARANCE THEY ACCESS.

SORRY I AM NOT BUYING INTO WHAT YOU ARE TRYING TO SELL.

Response by Linda Greer made Nov 12 at 2023 11:29 PM

Linda Greer — Sun, 12 Nov 2023 23:29:49 -0500

I tried to register for login.gov and couldn’t. Is this only for veterans and not military widows? What’s the phone number for assistance?

Response by LCDR Private RallyPoint Member made Dec 16 at 2023 9:07 PM

LCDR Private RallyPoint Member — Sat, 16 Dec 2023 21:07:59 -0500

I have a bad taste in my mouth for MFA after a few of my essential accounts forced me into with without any concern for the fact that I tend to be without cell phone access for long periods of time.

Response by SP5 Delphis Kaczowski made Jan 24 at 2024 4:18 PM

SP5 Delphis Kaczowski — Wed, 24 Jan 2024 16:18:10 -0500

AI will find your passwords. AI can duplicate fingerprints. We let a monster out with NO human controls. The FUTURE of the electronic age is beyond the comprehension of most users of computers today. Robots will displace about 35% of menial repetitive jobs & workers. They work 24/7 & don't complain or ask for pay raises or benefits. HAL was our introduction to AI.

Response by SP5 Delphis Kaczowski made Jan 24 at 2024 4:24 PM

SP5 Delphis Kaczowski — Wed, 24 Jan 2024 16:24:44 -0500

AI will find your passwords. AI can duplicate finger prints. HAL was our introduction to the future. Robots will displace 30% of menial repetitive jobs. Robots work 24/7 and don't complain or ask for pay raises or benefits. Welcome to the ELECTRONIC AGE in America.