World-class security technology
Multifactor's research team has produced dozens of combined patents, publications, and open-source projects, in pursuit of our mission to “redefine zero-trust” for the modern web.
World-class security technology
Multifactor's research team has produced dozens of combined patents, publications, and open-source projects, in pursuit of our mission to “redefine zero-trust” for the modern web.
Our research has been featured in…
AND
OR
AND
AND
OR
AND
Fast, flexible, and usable security
We understand that good security solutions are user-centric, and that low-friction solutions are paramount to usable application security. MFKDF2 securely derives cryptographic keys from multiple authentication factors while achievinguser indistinguishability, meaning that applications become meaningfully harder to attack while users notice no difference at all.
MFKDF2 is fully backward compatible with existing, commonly used factors such as passwords, hardware tokens, and biometrics, ensuring that users don't have to learn new technologies and can continue to use factors they are familiar with.
Learn moreSimple enforcement of complex policies
Between juggling multiple compliance requirements, complex organizational policies, and the need to protect sensitive data, real-world applications demand robust enforcement of complex security policies.
Multifactor's “Switchboard” technology suite uniquely enables trustless enforcement across authentication, authorization, and auditing, transforming typically weak, software-defined enforcement into strong, cryptographically backed guarantees.
Learn moreShare resources effectively
Existing account sharing solutions are often irrevocable, untraceable, and backed by weak password-based cryptography. It's no wonder that major password management solutions have dozens of publicly confirmed data breaches!
Multifactor's “Checkpoint” technology uniquely enables online resources to be shared by multiple users in a way that is immediately revocable, non-repudiable, and fine-grained, without requiring any changes to the underlying application being shared.
Learn morePublications
Multi-Factor Key Derivation Function (MFKDF) for Fast, Flexible, Secure, & Practical Key Management
Vivek Nair and Dawn Song
Distinguished Artifact Award
Decentralizing Custodial Wallets with MFKDF
Vivek Nair and Dawn Song
Multi-Factor Credential Hashing for Asymmetric Brute-Force Attack Resistance
Vivek Nair and Dawn Song
ProtoBlocks: Programming Language for Secure Implementation of Cryptographic Protocols
Vivek Nair, William Mullen, and Ethan Lee
- Preprint in EECS Technical Reports, 2023.
[pdf] []
MFDPG: Multi-Factor Authenticated Password Management With Zero Stored Secrets
Vivek Nair and Dawn Song
“I Can’t Believe It’s Not Custodial!”: Usable Trustless Decentralized Key Management
Tanusree Sharma, Vivek C. Nair, Henry Wang, Yang Wang, and Dawn Song
News
View All
Two Ways to Share an Account
2026-10-07
Maya asks to use your Netflix at 11:02 PM. Text her the password and you end up signed out of your own account. Send a Multifactor link and she’s in without ever seeing it.
Introducing Multifactor Lite: Share Online Accounts by Sending a Link
2026-10-01
In our second Lock-In Week we cut Multifactor down to the one thing we care about most: sharing an online account by sending a link, with permissions you choose, a live log of every action, and instant revocation. Try it today.
Introducing Notary: Proving What Code a Cloudflare Worker Is Running
2026-09-30
Cloudflare Workers are fast and scale on their own, but nothing lets a third party check what code a Worker is running. Notary pairs a Worker with TEEs so anyone can cryptographically verify the code that is live on a domain.