Mobile Auth & Admin 3FA · high-assurance sign-inSecurityHome
Two high-assurance flows: approve a web sign-in from your phone (no codes to type), and a 3-factor gate for the most sensitive admin changes that still works when a factor is offline.
Sign in with your phone
A sign-in on the web pushes an approval to the PURE app. Approve with Face ID — nothing to type.
Approve sign-in?
Chrome · macOS Dallas, TX · just now
— —
Match this number on the web screen
Number-matching defeats "approval fatigue" — you must read the code off the web screen, so blind taps don't grant access.
Admin change · 3-factor
Major admin actions (delete an org, change payouts, export all data) need three independent factors — and the third works offline.
1
PasswordSomething you know
2
Passkey / hardware keySomething you have
3
Offline challenge codeWorks with no signal — printed backup grid