WSW: Using 2FA to secure your website (an intro to Hyrdro Raindrop)

In today’s internet environment, the scope of using username and password as the only authenticating medium is easy prey for cybercriminals. Many log-in can be compromised in minutes and sensitive information such as username, password, email address, and credit card information is under threat. To tackle this threat, new security layers are being added day-in and out, one of which is 2 Factor Authentication.

2 Factor Authentication

2 Factor Authentication also is known as 2FA, it add another layer of security to log-in. This supplement the common standard of username and password during login with a verification code generated for a specific user. This code is usually sent via text message, email or via a mobile application. A popular example is Google 2FA app.

How it works

With the extra layer of security 2FA adds to log-in accounts, it’s processing usually involves two(2) steps which are;

1. What you know: with this step, a user enters what he/she knows which is the account username and password or any other information required by the log-in process. Instead of gaining access to the account directly, the user is required to provide extra information.
2. What you have or are: this step typically would be something you have such as pre-generated code, newly sent code (usually sent electronically – email or text), hardware, biometrics (such as fingerprint, iris scan or voice print).

 

The future of 2FA

In this post, we are introducing an improved 2FA – The Hydro Raindrop. Hydro Raindrop uses cryptography technology to secure accounts and businesses by leveraging the power of blockchain.

Hydro Raindrop vastly improves both of the current 2FA security vulnerabilities such as SMS hijacking and phishing by having the codes generated by the actual websites themselves, and only then entered onto the user’s phone. With this technology, the user can verify their identity anytime, anywhere in the world. Learn how to integrate Hydro Raindrop with your website or apps here.

Do you know another 2FA platform? Share it in the comment section.