MFA: multi-factorauthentication for businesses
Phishing-resistant MFA built in: possession cryptographic signature plus TOTP, two independent factors that meet PSD2 SCA without interceptable SMS or notification fatigue. On top of your current passwordless login.
SMS and email OTP are no longer enough
SMS codes are intercepted via SIM swapping and email OTPs get phished. A second factor only helps if the attacker can’t capture or replay it.
Possession factor
Cryptographic signature with the user’s key, not an SMS.
TOTP reinforcement
Time-based code from an authenticator app.
Two independent factors
Aligned with the PSD2 SCA banking requires.
Everything your MFA includes
Strong factors and control policies, managed from a single dashboard.
Anti-phishing
The second factor never travels as an interceptable code: it’s proven by signing with the private key, not by SMS or email OTP. Phishing and SIM swapping stop working.
TOTP
Authenticator app code (Authy, Google/Microsoft).
PSD2 SCA
Two independent factors that meet payments.
Adaptive MFA
Requires more factors based on access risk.
Policies
MFA rules per role and app from the dashboard.
Identity hosted in the EU, sovereign by design
INFINITY is ready for eIDAS 2.0 and the European Digital Identity Wallet (EUDI). Your data and your customers’ data stay in Europe.
- General Data Protection Regulation (GDPR)
- eIDAS 2.0 / EUDI Wallet
- Verifiable credentials
- Data hosted in the EU
Meet SCA and stop phishing
Phishing-resistant MFA on top of your current login, in days. We’ll show you with your case.
Digital identity as a product, enterprise security as a service
© Block-Auth 2026
All rights reserved
Industries
Web 3.0
Ecommerce
Gaming
Gambling
Fintech
Insurance
Use cases
Location
Calle Velázquez, 27, 1º Dcha, 28001, Madrid
Recognition
Hiring funded by grants from the Comunidad de Madrid
