Second factors built in, with no extra service to run.
People prove who they are with a passkey, a tap on their phone, a code from an authenticator app or an offline code. Pramaan is its own MFA provider. The second factor is checked inside the same server that issues the sign-in, the broker, so there is no separate MFA service to run.
Passkeys and security keys
People register passkeys and security keys from the browser, without the mobile app.
Number-matched push
A sign-in sends a push to the person's phone, and the person approves it in the Pramaan app by tapping the number the browser shows. The app is Android only: there is no iOS app.
Codes from an authenticator app
Pramaan also accepts codes from an authenticator app as a second factor, checked by the same broker.
Offline codes, when the phone has no network
A phone with no network can neither receive a push nor answer one. It can show a rotating offline code instead, which the person types into the browser, and the broker approves the waiting sign-in if the code matches.
For your engineers
Technical detail: the signature type
Passkeys and security keys register over WebAuthn. Registration takes ES256 only, none attestation: a key that supports only Ed25519 or RS256 will not enrol. The authenticator codes are TOTP.
Questions
Will my security key work?
Yes, if it can sign with the type registration takes. Registration takes a fixed signature type only, so a key that cannot sign with that type will not enrol. The technical detail above names the type.
Is there an iPhone app?
No. The Pramaan app is Android only, and there is no iOS app. A person can register a passkey from the browser, without the mobile app.
Why are offline codes weaker?
They rest on a shared secret, with no number match and nothing tying the code to the sign-in it approves. That is why each device opts in.
Does the broker check which authenticator a person used?
No. With none attestation, the broker does not check which make or model of authenticator created the key.
Do I need a separate MFA product?
Pramaan is its own MFA provider. Whether to keep another MFA product is your decision.
Talk to us, or try it first
-
Book a walkthrough
Against your own apps, not slides.
-
Run the lab
It uses a demonstration account; none of your data is involved.
-
See pricing
Published floors, named-user bands and what every tier includes.