For individual users, popular 2FA apps offer free versions and configuring extra smartphone or email authentication is relatively straightforward with provider guidance. At an enterprise level, IT departments take on added administration which incurs some costs. But this is typically far less than costs imposed by security incidents.