Skip to content
Refactor2FActor

Refactor2FActor

It sucks to lose your phone or access to your email. Even worse, you're losing a two-factor authentication method as well to rub it in. But with refactor2FActor your web3 wallet comes to save your day

Created on 1st March 2025

Refactor2FActor

Refactor2FActor

It sucks to lose your phone or access to your email. Even worse, you're losing a two-factor authentication method as well to rub it in. But with refactor2FActor your web3 wallet comes to save your day

The problem Refactor2FActor solves

2 factor authentication is a ubiquitous feature of the modern web experience, that inconveniences the user for the sake of security. However, not only does it not serve as an absolute guarantee of security (as your second factor can be compromised), but it is also locking out users out of their accounts more often than it stops actual hackers. All current solutions have significant usability and convenience drawbacks. Phone numbers require network coverage and a second device, mobile apps and emails require tab switching and searching for the notification, Yubikeys are easy to lose, biometrics are a privacy nightmare and password managers introduce a single point of failure.
With refactor2FActor we finally deliver a Web3 solution that is significantly more convenient to use than the current Web 2.0 standards. No more switching tabs, you can pass your two-factor authentication right on the same browser tab by signing a transaction with your ETH wallet, which can itself be embedded in a browser extension (ex. MetaMask and Coinbase Wallet), which makes the two-factor authentication experience a breeze requiring just a couple of extra button clicks instead of scrambling for text messages, push notifications or phone calls. Additionally, the key weakness of wallets becomes a strength. Any hacker who is not playing 4D chess (if he does it probably is a white-hat hacker anyway) will drain the wallet instantly giving you a "notification" when your two-factor is compromised, so you don't have to rely on the cybersecurity team of the two-factor provider to let you know you have been pwned

User Interaction and Data Flow

You start with signing up to our service by entering your information, after which you will be redirected to the page where you can enable your wallet as a second factor. After that you will be able to sign into the application. Once you enter your credentials you will be prompted to connect your ETH wallet and sign the transaction. If a wrong wallet will be used you will be redirected back to home page. If correct wallet is used to sign the transaction you will enter the dashboard.

Key differentiators and uniqueness of the project

  1. Two factor authentication is a significant chunk of the modern web experience that has been overlooked by the blockchain ecosystem, and current Web3 solutions are not designed to be integrated into that workflow.
  2. Our solution is more convenient than most existing solutions due to eliminating the need for extra hardware (phone, Yubikey), tab switching (email and mobile app), exposing your sensitive data (biometrics) or pegging your fortunes to cybersecurity at Facebook, Apple, etc., enabling you to stay on the same tab and sign the transaction in place.
  3. Our solution uses the fear of all wallet holders (compromised wallet getting drained)...as a security feature. Few hackers will resist draining a compromised wallet, which will serve you as a notification that your 2 factor is compromised enabling you to protect the more important account on time.

Trade-offs and shortcuts while building

We originally set out to deliver this as an npm package or a 2 Factor web server and demo the addition of our feature to existing codebases, but due to time restrictions we deliver an example of the integration of our solution with a sample banking app as a sample app package. Also, we used Rainbow Kit due its great convenience, but it has limited amount of wallets properly supported, which cut down on the amount of wallet currently supported by our service

Additional Features

This is a greenfield project that was built specifically for the Buidlathon

Tracks Applied (1)

IDENTITY, PRIVACY + SECURITY

We are using Web3 wallets to verify the identity of the user within a conventional 2 factor authentication workflow, whi...Read More

Cheer Project

Cheering for a project means supporting a project you like with as little as 0.0025 ETH. Right now, you can Cheer using ETH on Arbitrum, Optimism and Base.

Discussion

Builders also viewed

See more projects on Devfolio