As we all know from the news, password theft is becoming more and more common. Requiring people to use strong passwords is no defense against spear phishing and keyloggers. One slip and a hacker can download all of our donor information, or even send fraudulent communications and induce donors to send money to the wrong address.
Two-factor authentication, which Google, Microsoft, and other major providers now have available for their cloud platforms, will soon be absolutely essential if it is not already.