MFA for Small Businesses: The Fix Behind Your Broken Scan-to-Email

Here’s a call we get more than you’d think: a business owner tells us the office scanner stopped emailing PDFs. It worked for years. Nobody changed the copier. Then one Monday, scan-to-email quietly died — no error the front desk could make sense of, just documents that never showed up in inboxes. Nine times out of ten, the copier isn’t the problem. Microsoft is.

What actually broke

Microsoft has spent the last couple of years shutting off “basic authentication” — the old method where a device logs into email with just a username and password. That method is exactly how most office copiers and multifunction printers were set up to send scans. When Microsoft 365 flips a tenant to modern authentication (OAuth) or a policy change disables the legacy SMTP path, the copier is still trying the old way, gets refused, and scan-to-email stops. Same thing happens to some line-of-business apps, a few older accounting tools, and any device still using a saved password to reach Exchange.

The reason this matters beyond a broken scanner: the change is happening because a password alone is no longer considered safe enough to protect a mailbox. And if your copier was authenticating with a plain password, that tells you something about how the rest of your accounts are probably protected too.

Why a password by itself stopped being enough

For a small business in the Chicago Southland, the most common way to get hacked in 2026 isn’t some movie-style breach. It’s an employee password that gets phished, guessed, or bought off a list from a completely unrelated site the employee reused it on. Once someone has that password, they log in as your employee — from anywhere in the world — and there is nothing to stop them. No alarm goes off. It just looks like your staff signing in.

Multi-factor authentication (MFA) is the fix, and it’s boring in the best way: after the password, the account asks for a second proof — a tap on a phone app, a code, a hardware key. A stolen password by itself becomes useless. It’s the single highest-impact security control a small business can turn on, and for most Microsoft 365 and Google Workspace plans it costs nothing extra.

The catch nobody warns you about

Turning on MFA the wrong way is how you end up with a dead copier, locked-out staff, and a shared account nobody can get into on a Friday afternoon. The order of operations matters:

• Inventory what logs in with a password first. Copiers and MFPs sending scan-to-email, the accounting software, any old app or backup tool, shared mailboxes, the alarm or camera portals. These break the moment basic auth goes away, and they can’t do a phone tap.
• Move devices to a modern method before you flip the switch. A scanner should use OAuth, a dedicated relay, or an app-specific credential — not the owner’s personal login. We reconfigure the copier’s send settings so the scan-to-email keeps working the day the tenant changes.
• Roll MFA out to people in a planned wave, not all at once. Enroll everyone, give them a heads-up, and keep a break-glass admin account documented so you’re never fully locked out.
• Use an authenticator app or hardware key, not text messages, where you can. Texts are better than nothing but are the weakest option.

Passwords still matter — just not alone

MFA is the seatbelt, but you still want a decent car. A password manager so nobody is reusing the same password across ten sites, a minimum length instead of forced monthly changes (which just produces Password1, Password2…), and a fast way to shut off a departing employee’s access the day they leave. None of this is exotic. It’s the stuff that gets skipped when a small business is busy running the business.

We handle both sides of this

Digitech LLC works with small businesses across the south suburbs — Markham, Tinley Park, Orland Park, Flossmoor, Homewood and the surrounding towns — and because our sister company services copiers and multifunction printers, we’re one of the few local shops that fixes the security side and the “why did my scanner stop emailing” side in the same visit. If your scan-to-email has already broken, or you want MFA turned on without something else breaking in the process, we can map it out and do it cleanly.

Call 708-596-2990 or email mknipper@digitech815.com and we’ll take a look at how your accounts and devices are set up today.

Why Q4 Is the Right Time to Get Your Business Technology in Order

As summer winds down and the fourth quarter comes into focus, most Chicago Southland business owners are thinking about year-end goals, budgets, and planning for next year. It’s also the perfect window to take a hard look at the technology your business runs on — before the holiday rush, before budget season closes, and before small problems become expensive ones.

At DigiTech815, we work with small and mid-sized businesses across Frankfort, Manhattan, Mokena, New Lenox, Joliet and the surrounding south suburbs. Here’s what we recommend every business review heading into Q4.

1. Review Your Cyber-Insurance Requirements

If your business carries cyber-insurance — and increasingly, if you want to renew or qualify — your carrier is asking harder questions. Multi-factor authentication, endpoint protection, security awareness training, and evidence of a security review are becoming standard requirements, not optional extras. If your policy renews near year-end, scrambling to meet requirements at the last minute is stressful and can be more expensive. Get ahead of it now.

2. Check That Your Backups Actually Work

A backup you’ve never tested is just a hope, not a plan. Year-end is a natural time to verify that your critical data is being backed up, that the backups are stored somewhere safe and offsite, and — most importantly — that you can actually restore from them. A backup dashboard that says “successful” is not the same as a tested restore.

3. Budget for the Hardware That’s on Its Last Legs

That server humming along on borrowed time, the workstations running an operating system that’s about to lose support, the firewall that hasn’t been updated in years — Q4 budget planning is the time to address them on your schedule, not after a failure forces your hand. Replacing aging equipment on a plan can be less disruptive and easier to budget than an emergency replacement plus downtime.

4. Tighten Up Access and Offboarding

Do former employees still have active logins? Does everyone on your team have access to systems they no longer need? Loose access control is a common and preventable security gap. A quick review of who can touch what is a simple, high-value exercise before year-end.

5. Plan Instead of React

Planning ahead gives a business more room to address technology problems before they interrupt the workday. A short conversation now about where your business is headed next year — new locations, more staff, new software — lets us make sure your technology grows with you instead of holding you back.

Let’s Get You Ready for a Strong Finish

You don’t have to tackle all of this alone. DigiTech815 provides managed IT, cybersecurity, and technology planning for businesses across the Chicago Southland — enterprise-grade support without the enterprise overhead. If you’d like a straightforward review of where your business technology stands heading into Q4, we’re happy to help.

Call us at 708-596-2990 or email mknipper@digitech815.com to set up a no-pressure conversation. We’re local, we pick up the phone, and we’ll give you honest advice — always.

Data Backups That Actually Work: A Small Business Guide to the 3-2-1 Rule

Here’s an uncomfortable truth for small businesses across the Chicago Southland: many owners think they have backups. Far fewer actually have backups that work. There’s a big difference between a file syncing to a cloud folder and a real, tested backup you can restore from at 7 a.m. on the worst morning of your business life.

When ransomware hits, when a server drive fails, or when an employee accidentally deletes the wrong folder, your backup is the only thing standing between “a rough afternoon” and “we might not reopen.” If you run a business in Tinley Park, Orland Park, Frankfort, or anywhere in the south suburbs, this is one of the highest-return hours you can spend on your IT this year.

The 3-2-1 Rule, In Plain English

The backup standard the entire IT industry leans on is simple enough to remember without a spreadsheet. It’s the 3-2-1 rule:

• 3 copies of your important data — the live version you work on, plus two backups.
• 2 different types of media — for example, an on-site backup appliance and cloud storage, so a single failure doesn’t wipe out everything.
• 1 copy stored off-site — physically away from your office, so a fire, flood, theft, or building power surge can’t take out your originals and your backup at the same time.

Why does the off-site copy matter so much? Because some “backup” setups still store the backup drive beside the same server it’s protecting. If a burst pipe or an electrical fire takes the server room, it takes both. Off-site — whether that’s a cloud provider or an encrypted copy in another location — is what makes a backup a real safety net instead of false comfort.

Sync Is Not Backup

This one trips up a lot of owners. Services like OneDrive, Google Drive, and Dropbox are file sync tools. They’re useful for sharing and collaboration, but sync means changes can flow in both directions. If ransomware encrypts your files or an employee deletes a critical folder, that change may sync to the cloud too. Some services provide version history and recovery tools, but those features are not a substitute for an independently managed backup.

A proper backup strategy keeps independent recovery points you can roll back to — yesterday, last week, or last month. When someone asks us “aren’t we already backed up because everything’s in the cloud?”, the honest answer is usually: not the way you think you are.

The Test Everyone Skips

An untested backup is a guess. The single most important thing you can do this month is a test restore: actually pull a few files — or a whole system — back from your backup and confirm they open, they’re current, and they’re complete.

A status screen can show that a scheduled job ran without proving every critical file is recoverable. A quick monthly or quarterly test restore is the difference between confidence and crossing your fingers.

How Fast Can You Get Back Up? (RTO and RPO)

Two numbers decide how much a disaster actually costs you:

• RTO (Recovery Time Objective): How long can you afford to be down? An hour? A day? Three days? For a business that runs on scheduling, invoicing, or point-of-sale, every hour offline is lost revenue and frustrated customers.
• RPO (Recovery Point Objective): How much data can you afford to lose? If you back up once a night, a mid-afternoon crash means you lose a full day of work. If that’s too painful, you need more frequent backups.

You don’t need to be a technician to answer these. Just ask yourself honestly what a full day of downtime — and a full day of re-entered data — would cost your business. That number tells you how much backup you actually need.

A Quick Backup Reality-Check for Your Business

Run through these five questions. If you hesitate on any of them, there’s a gap worth closing:

• Do you have at least one backup copy stored off-site?
• Can you restore a file from last week, not just from five minutes ago?
• Has anyone actually tested a restore in the last 90 days?
• Are your backups encrypted so a stolen drive isn’t a data breach?
• Do you know how long it would take to get fully back to work after a total server loss?

Don’t Wait for the Bad Morning

Backups are one of those things nobody thinks about until the moment they desperately need one — and by then it’s too late to fix. The good news: getting this right is straightforward, affordable, and gives you real peace of mind.

At Digitech, we help small businesses across the Chicago Southland set up backups that follow the 3-2-1 rule, run automatically, and get tested regularly — so if the worst happens, you’re back on your feet fast instead of scrambling. If you’re not 100% sure your backups would save you in a real emergency, let’s find out together before you have to.

Call us at 708-596-2990 or email mknipper@digitech815.com for a straightforward backup and business continuity review. No jargon, no pressure — just a clear picture of where you stand and what it would take to be truly protected.