Multi-Factor Authentication (MFA) is one of the simplest ways to stop attackers logging in with stolen passwords.
It’s also one of the hardest things to get people to actually use.
Teachers, nursery managers, office staff and care coordinators already juggle a lot. If MFA feels like one more barrier, it won’t last.
So how do you make it work in real life, not just on paper?
Start with why, not how
When people understand why MFA exists, they’re more likely to stick with it.
Instead of saying “It’s required by IT”, explain that it protects the children, residents, colleagues and families your team serves.
“MFA stops criminals logging in, even if a password is stolen. It’s not about catching people out, it’s about keeping our data safe.”
Framing it as a shared responsibility, not a technical rule, builds trust.
Choose the least painful method
There’s no single right way to do MFA. What matters is choosing an option that fits how your team works.
Authenticator apps like Microsoft or Google Authenticator are fast and reliable.
Push notifications are easier than typing codes.
Hardware tokens are useful where staff don’t use smartphones.
Biometric logins (fingerprint or Face ID) are ideal for shared devices.
The key is simplicity. The fewer steps it takes, the fewer complaints you’ll hear.
Make setup simple and supported
Rolling out MFA is as much about people as process.
Give staff time to set it up, and support them in person if needed.
Run drop-in sessions at break times or after hours, especially for those who find tech stressful.
Avoid last-minute “you must enable this by 5pm” emails.
A calm rollout always works better than a rushed one.
Acknowledge small frustrations
If someone forgets their phone or loses access, help them quickly and kindly.
A locked-out teacher or nursery manager on a Monday morning doesn’t need a lecture – they need a reset link (but check it is really them first).
Patience builds long-term buy-in.
Keep MFA human
The best MFA rollout is one that becomes invisible.
Once people trust that it works and doesn’t slow them down, it becomes part of daily life.
Remind them that it’s there to protect their logins, their pupils’ data and their work.
At its heart, MFA is about people looking after each other’s information. That’s safeguarding, not just security.
Need help introducing MFA to your team?
Black Swan Cyber Security Solutions helps schools, MATs, nurseries, care providers and small businesses roll out MFA, email protection and other safeguards in ways that actually work for people.
We focus on culture first, technology second – because both matter.
