What are typical use-cases for 2FA?

[William_Dudley]

The following use-cases are typical of the SMS-delivered 2FA scenarios. In many of these use-cases, the user will have already registered a mobile device (for example, phone number) prior to initiating the use-case that requires two-factor authentication.

Use Case 1 – Device Authentication

• User logs into account using normal username and
• Website notices user is using new
• Website sends verification text to registered
• User inputs verification pin code to complete authentication processes.

Use Case 2 – User Registration

• A user is registering for a
• The website prompts the user for their phone
• The website then sends a voice call or SMS to the user with a one-time numeric
• The user enters the code into the website to complete the validation.

Use Case 3 – E-Commerce Transactions Confirmation

• Users complete a buy or sell transaction
• The website then sends a voice call or SMS to the user’s previously registered device with a one-time numeric
• The user enters the code into the website to complete the validation.

Use Case 4 – Password Reset

• User opts-in to verification messages by inputting phone number on a
• User later forgets login credentials to website and requests one-time
• The website sends the one-time password (either numeric-only or alphanumeric) to the
• User enters the code into the website completing the verification
• User can now reset password.

Use Case 5 – Two-Way SMS  

• User logs into account using normal username and
• Website notices user is using new device or IP address.
• Website sends verification text to registered
• User replies to text message with approval code to complete verification process.

Use Case 6 – Money Transfer Validation

• User has phone number registered to website and opted-in to receive security
• User completes money transfer with
• Website sends verification SMS to user’s phone with pin
• User inputs the pin code to complete the verification process.

Use Case 7 – Marketing/Couponing/Engagement

• A subscriber opt-in for a special promotion with a coffee chain
• The customer walks by a coffee shop associated with the coffee chain.
• The person is detected as being in the area of the coffee shop and a coupon code is sent to the subscribers phone
• The subscriber walks in the shop and shows the code to the clerk to receive their discount on their tall latte. The clerk scans or enters the code to validate “coupon” code.

Read the Sinch Authentication 365 - Solution Brief to learn how of these use-cases can be implemented using Authentication 365.