Ok, I know there’s very little that’s sexy about security. It’s not “fun” or “exciting” until something bad happens. Then, it’s the VERY BAD kind of exciting!
To keep baddies out of your Salesforce org, you should turn on multi-factor authentication (MFA).
What is MFA you ask? Well! It’s like your ATM PIN code. Yes, you have your ATM card, but you also have to supply a PIN before the magic machine spits out those Benjamins.
That’s MFA! Two factors!
Something you have (your ATM card)
Something you know (your PIN)
It’s that simple!
Here are some resources: