It's often said that the most important things you can do protect your accounts and wider network from hackers is to use multi-factor authentication (MFA). That's because one of the most common ways cyber criminals breach networks is by using phishing attacks to steal passwords or simply by guessing weak ones. Either way, so long as they are using a real password many systems will assume it's safe to give them access.

https://www.zdnet.com/article/hackers-are-finding-ways-around-multi-factor-authentication-heres-what-to-watch-for/?web_view=true