Airlock 2FA is a multi-factor authentication (MFA/SCA) solution for second-factor user verification and transaction authorization. Delivered as a cloud service, its functionality is exposed via a REST API with available SDKs for integration into single-page applications and native mobile apps for iOS and Android; it is also available as a pre-built web application. The system enables users to manage personal cryptographic keys on their mobile devices and supports multiple authentication methods, including push notifications, offline QR codes, one-time passcodes (OTP), biometrics, and passwordless login workflows.
The system supports out-of-band transaction confirmation to meet financial regulatory requirements and incorporates risk-based policies to determine when authentication is required. It provides for offline authentication when a device lacks an internet connection. The solution offers user self-service tools for enrollment and device management, administrative tools with reporting, and utilities for automated token migration from legacy systems. Authentication workflows can be adapted through configuration, the REST APIs, or the provided SDKs.