Multiple MFA mobile numbers assigned to one account!

Hi,

Thank you for your submission. Disallowing multiple MFA (Multi-Factor Authentication) mobile numbers assigned to a single account is a crucial security measure for the following reasons:

1. Prevent unauthorised access: Allowing multiple phone numbers increases the risk of unauthorised individuals gaining access to your Reckon account. If one of the phone numbers is compromised, an attacker could potentially bypass MFA protections and access sensitive Payroll data.

2. Centralised security control: By limiting MFA to one mobile number, the account owner retains sole control over authentication methods. Multiple numbers create ambiguity over who is receiving the MFA code, making it harder to trace accountability in the event of unauthorised access.

3. Consistency and auditability: Using one MFA number ensures consistency and allows for clearer audit trails. This makes it easier to track authentication attempts and identify suspicious activity.

Ultimately, limiting MFA to a single mobile number ensures tighter control and reduces potential vulnerabilities, thus strengthening the security of your Reckon account.

Thank you,
Johnnie Li

Reckon