Yes. Multi-factor authentication is one of the most important controls for protecting accounts from password theft, phishing and unauthorised access.