Advancing account security as part of Cloudflare’s commitment to CISA’s Secure by Design pledge

This post details Cloudflare's efforts to enhance account security in alignment with CISA's Secure By Design pledge, specifically focusing on increasing Multi-Factor Authentication (MFA) adoption. New features include social logins with Google and Apple, which leverage the partners' existing MFA requirements, and leaked password notifications that prompt users to change compromised credentials. For administrators, the ability to require MFA for all users in an account has been introduced. The post also reiterates the importance of strong, user-generated passwords and phishing-resistant security keys, and encourages SSO for enterprise customers. While the post mentions account access management and permissions in the context of the pledge, its primary technical contribution is in the area of user authentication and account security enhancements.