What Multifactor users actually want

Multifactor collects personal and non-personal data with vendor restrictions, uses cookies for behavior tracking, and reserves rights to share information with legal/governmental requests. The company has no obligation to backup user content, establishing clear boundaries of user responsibility.

“Terms of Use document for Multifactor authentication product; includes mandatory arbitration clause with 30-day opt-out period and class action waiver”

Multifactor enforces strict trademark usage rules preventing incorporation into third-party product names and requiring formal partnership agreements for service resale. This protects brand integrity, prevents IP infringement through phishing or misuse, and ensures authorized distribution.

“Word marks (not logos) can be used to identify Multifactor products/services; logo use requires prior written permission”

Playbooks feature enables reusable automations combining natural language with pre-configured permissions, supporting complex organizational structures and time-varying access levels across teams and folders without requiring manual reconfiguration.

“Playbooks feature enables reusable automations combining natural language commands with pre-configured permissions for complex task automation.”

Terms of service reserve right to modify or discontinue service without notice, provide no warranty guarantees, and explicitly disclaim liability for breaches despite security protections. Users must indemnify Multifactor for claims arising from their use or policy violations.

“Company reserves right to modify, suspend, or discontinue the Site without notice and has no obligation to provide support or maintenance”

Multifactor offers browser extensions with autofill, autosave, and passkeys capabilities across major platforms (Chrome, Mac, Microsoft, iOS, Android) plus extensive support infrastructure including documentation, portal, blog, videos, and status page, enabling seamless adoption.

“Company provides extensive support infrastructure including documentation, support portal, blog, videos, and status page for transparency”

Solution positions across AI Safety, Healthcare, Web3, Finance, and AR/VR industries with specialized focus on zero-trust authentication for modern web threats including post-quantum security, demonstrating broad market relevance.

“Product offers specialized solutions across multiple high-value industries including AI Safety, Healthcare, Web3, Finance, and AR/VR”

Strong market validation evidenced by Y Combinator backing (F25 batch), $15M seed funding, and additional backing from Pioneer Fund, NSF, and Berkeley Center for Responsible Decentralized Intelligence, positioning the company as credible player in zero-trust security.

“Company is Y Combinator backed (F25 batch) with additional backing from Pioneer Fund, NSF, Berkeley Center for Responsible Decentralized Intelligence, and others.”

Multifactor's research team has produced dozens of patents, publications, and open-source projects advancing zero-trust security, with strong academic credentials and research featured in top venues (USENIX Security, PETS) and recognized with grants. The proprietary technology stack includes MFKDF2, Switchboard, and Checkpoint platforms forming the core of its zero-trust infrastructure.

“Company emphasizes research credibility with publications in USENIX Security, PETS, IEEE EuroS&P, ACM UIST, and ACM CHI venues.”

Identity is the root cause of cloud security breaches and the first/last line of defense. Multifactor binds identity to multiple authentication methods (biometrics, hardware tokens) and achieves user indistinguishability—making apps harder to attack while users notice no change—using cryptographically-backed guarantees.

“Cloud-native authentication solution that binds data to multiple authentication methods including biometrics and hardware tokens”

Multifactor enforces patents on core technologies while explicitly allowing use by academic researchers and non-profits, and frequently licenses software under open-source licenses (BSD) to promote innovation. This strategy gives confidence to invest in long-term research while protecting IP through patents that require separate licensing.

“Multifactor frequently licenses software under open source licenses to promote innovation and collaboration”

Zero-trust implementation requires comprehensive, traceable audit capabilities to track all access and actions with non-repudiable proof of who accessed accounts and what actions they performed. This contrasts with existing solutions that offer no visibility into account usage and is essential for compliance and security investigation.

“"Multifactor redefines zero-trust account management with fine-grained sharing, detailed audit trails, and a world-class security architecture."”

Multifactor is a registered Delaware Public Benefit Corporation with a mission to enhance cybersecurity and privacy embedded in the corporate charter. The company offers free or discounted services to at-risk individuals and organizations including journalists, human rights defenders, and NGOs, viewing patents as innovation protection aligned with public benefit rather than competition-stifling.

“Company mission is to reinvent zero trust for the modern web, embedded in corporate charter and used as evaluation lens for all business decisions”

Current password managers lack granular control and true revocability—once shared, credentials can be copied and redistributed. Multifactor's Checkpoint technology enables secure one-click sharing and instant revocation of account access without password rotation, solving a critical pain point for team and AI agent collaboration.

“Password managers scatter credentials, lack granular sharing controls, and provide untraceable access—creating security gaps for team collaboration.”

Multifactor's core mission is building trustless authentication, authorization, and auditing infrastructure specifically designed for AI agents operating on the agentic web. The platform uses cryptographic guarantees to enforce security without requiring trust in intermediaries, addressing the emerging threat landscape where AI agents act faster than humans and probe for security flaws at scale.

“Multifactor enables trustless enforcement across authentication, authorization, and auditing using cryptographic guarantees”

Traditional shared encryption keys create impossible revocation scenarios and lack access granularity. Switchboard uses Proxy Re-Encryption to decouple data from access rights, enabling granular permissions (including write-only access) with true revocability while simultaneously achieving security, efficiency, and flexibility.

“Shared encryption keys create no granularity in access control and enable impossible revocation—users retain keys and can still decrypt data”