SixToken

An app that runs on Android on a mobile device, that can authenticate someone using a web application (e.g. on a desktop computer) using a variation on push notification. Our approach is secure enough to replace username/password authentication, not just serve as a 2FA enhancement of it.

The user connects to the web application from a browser, and supplies their userid. A notice pops up in SixToken on their Android device requesting approval to authenticate to the website. The user enters a PIN or swipes a fingerprint on the mobile device, and the application can now proceed, knowing the user's identity and that their identity has been strongly verified.