Amazon has recently introduced multi-factor authentication (MFA) to its business email service, WorkMail, eight years after its initial launch. This move addresses longstanding security concerns, as MFA has become a standard practice in safeguarding digital communications.

Despite the delay, implementing MFA in WorkMail isn’t straightforward. Administrators must manually enroll each user into the AWS Identity Center, as MFA isn’t enabled by default. Previously, MFA configuration was possible via AWS Directory Service, but it was complex and limited to AWS-managed Microsoft Active Directories.

Launched as a competitor to Microsoft Exchange, WorkMail has struggled to gain significant market share. In late 2023, Amazon signed a $1 billion deal with Microsoft to provide Microsoft 365 licenses, including Outlook, to one million of its corporate and frontline workers.

An Amazon spokesperson highlighted that WorkMail adheres to AWS security standards, including updates like moving TLS minimum versions to 1.2 and expanding audit logging support.