Advancing account security as part of Cloudflare’s commitment to CISA’s Secure by Design pledge

Cloudflare details progress on its CISA Secure by Design pledge to increase multi-factor authentication (MFA) adoption, introducing social logins with Apple and Google, leaked password notifications, and expanded MFA options (security keys, TOTP) while promoting strong password practices and backup codes. The post also highlights admin controls to require MFA across accounts and encourages enterprise single sign-on (SSO) for stronger, scalable authentication.