Video · 1:59

Adaptive Risk Based Two Factor Authentication

How Spriv's Adaptive Risk Based Two Factor Authentication works: once a user allows a login from a specific computer and their phone detects the same environment, future logins are authenticated automatically, some in as little as 175 milliseconds, with no user intervention.

1:59 Published November 28, 2016 by Two Factor Authentication Spriv

What this video covers

  • Adaptive authentication checks whether the paired phone's location matches the computer's geographic location.
  • For privacy, Spriv only confirms that the two line up. It never shares the phone's actual location.
  • A match approves the login automatically; a mismatch lets the user approve or deny it manually.
  • It needs a stable internet connection (Wi-Fi or mobile carrier) and the Spriv app installed and paired with the user.
  • When there is no connection at all, TOTP remains available as a fallback: a six-digit code generated from the phone's clock.

About Spriv Adaptive Multi Factor Authentication

Spriv is a patented Adaptive Multi Factor Authentication platform. It verifies the second factor out-of-band and in the background, so a user signing in from a computer and location Spriv already trusts is not interrupted, while a login that looks abnormal still has to be approved on the paired phone.

The same platform covers Windows Remote Desktop (RDP), Linux and Unix PAM for SSH and sudo, and custom applications through a REST API. Adaptive MFA sits alongside Allow/Deny push, Two-Way SMS and TOTP, so every user keeps a way in when their phone has no signal.