What this video covers
- The first login from a new computer is approved once, from the Spriv mobile app.
- Spriv then recognises that computer's signature and location, and the phone paired with the user.
- Later logins from the same computer and location are verified in the background: no code to type and nothing to tap. Most clear in about 175 milliseconds.
- When a login looks abnormal (a new location, an unfamiliar computer, or a phone that is not where the computer is), the user gets an Allow/Deny push notification instead.
- Because users are not asked to press Allow on every login, they are not trained to approve an attacker's request out of habit.
About Spriv Adaptive Multi Factor Authentication
Spriv is a patented Adaptive Multi Factor Authentication platform. It verifies the second factor out-of-band and in the background, so a user signing in from a computer and location Spriv already trusts is not interrupted, while a login that looks abnormal still has to be approved on the paired phone.
The same platform covers Windows Remote Desktop (RDP), Linux and Unix PAM for SSH and sudo, and custom applications through a REST API. Adaptive MFA sits alongside Allow/Deny push, Two-Way SMS and TOTP, so every user keeps a way in when their phone has no signal.