AuthProof

AuthProof is a mobile + desktop companion that reduces MFA push-bombing and “approve by habit” failures by adding lightweight, verifiable context to every login prompt. Instead of a generic push notification, users see a signed request card: service name, device fingerprint, approximate location, IP reputation, and a short human-readable reason (“New Chrome on Windows, first time in 30 days”). The desktop helper can display a one-time visual code that must match the phone screen (fast, offline, and resistant to remote attackers). For teams, an admin console provides policy templates (high-risk geos, impossible travel, new device) and audit trails without replacing your existing IdP. It integrates with common SSO/MFA providers via OIDC/SAML event hooks and supports passkeys where available, but focuses on the messy reality: legacy MFA is everywhere and users are trained to click yes.