[ANN] Clef is secure two-factor authentication with no passwords or tokens

[Clef]

https://i.imgur.com/jYAfySQ.png

Two-factor authentication from the future

https://i.imgur.com/CSXjczS.png

Clef is secure two-factor auth with no passwords or tokens As we move more of our personal information into the cloud, we need security we can actually use. Clef uses the mass adoption of smartphones to make an identity platform for the modern web, creating a totally new approach to logging in online. We've built two-factor authentication that lets sites recognize their users with a wave of their phones. Clef puts secure cryptography in the hands of every user — no weak passwords, frustrating tokens, or clunky dongles.

https://i.imgur.com/9n44inT.gif

Two-factor from the future Unlike password-based solutions like Google Authenticator, Clef is two-factor that users love. With just a wave of their phone, they're logged in to your site — it feels like magic. Always getting better Traditional two-factor hurts retention and growth. With Clef, you have a dedicated team of security & usability experts perfecting your two-factor flow. Current Bitcoin Space Partners So far we are onboard with: Koinify CoinDaddy BetMoose Bitspark ziftrPAY AlphaPoint MeXBT FlowBTC Bitt BitQuick ToshiDesk We are liaising with others in the space, more updates on the way. STAY TUNED!

How Does It Work?

https://i.imgur.com/AbiFqsu.png

https://i.imgur.com/5hyyRym.png

Secured with Touch ID Every time a user logs in, they will be uniquely identified with their fingerprint using Apple's Touch ID technology. With secure biometrics, you can trust that your users are who they say they are. If a user's device doesn't support Touch ID, Clef securely falls back to a PIN on the device — there's always a second-factor. Learn more about Touch ID Time-tested security Clef runs on an RSA public-key architecture, technology that developers have been using to secure their logins for years. We let the phone handle the hard cryptography and give your users an experience they'll love. See the documentation Fraud detection & monitoring We use location, usage, and hardware data to make sure every authentication is genuine. With each user tied uniquely to a phone, Clef protects your site from fraud and abuse. With our security team handling threats, you'll have more time to focus on product. Go to sign up https://i.imgur.com/edleKYo.png Log out from anywhere With Clef, users can log out of their computer browsing session from anywhere in the world. With a single tap of the logout button on their mobile device, they'll be logged out of your website. Learn more https://i.imgur.com/nSphBQk.png Built for the world Clef is already internationalized in 10+ languages and we have more on the way. No matter where your users are in the world, they'll get a hand-crafted experience for their location. Somewhere else? Shoot us an email and we'll work with our team of language specialists to make it happen. See the languages Clef supports https://i.imgur.com/aXMRM38.png iOS & Android We've built native apps for the best mobile platforms in the world. On both iOS and Android, your users will enjoy a beautiful experience hand-crafted for their operating system. Download the apps https://i.imgur.com/W40Kvvl.png Deploy Clef for $0, pay as you need You can use Clef for unlimited users and logins forever. For even more features, Clef is the cheapest two-factor on the market. See pricing https://i.imgur.com/BuYoEqb.png Super simple integration Two-factor has been on your timeline for months, but you can never spare the developer time. With Clef, you can be up and running with the best two-factor in the world in less than a day. Explore the documentation

Clef Values

Be better today than yesterday Being better is more important than being the "best", because "best" means complacency and better means progress. We are always improving. Improvement requires reflection, so we take ownership of our mistakes and question our habits. Treat others the way they'd like to be treated Our customers and teammates have different needs from our own, so we must consider their perspectives to communicate effectively. We work best together when we empathize with one another, and we create the best product when we understand the people we are building for. Fight the default of exclusion Inequality and exclusion are the defaults of our industry. Without intentional effort, we will inherit those failings and worsen the problem. Building a diverse team is a moral imperative and we build a better business and product by bringing different perspectives to the table. We look for voices unlike our own because they are the only ones that help us grow. Build trust with truth Transparency and honesty are requirements for succeeding with Clef. In order to build a trusting community we give employees and customers deep visibility into how decisions are made and easy outlets to help guide our course. When we build trust through good communication, we create an environment for better communication in the future. We succeed together We fight for Clef because we love the problems we solve and the people we work with. We are most excited when the company’s successes are our own, and when our teammates recognize our contributions. When we’re excited, the hard work we do always has meaning.

Easy to integrate, use, and pay for

https://i.imgur.com/7Wd4zzn.png

https://i.imgur.com/KZjHzMJ.png

https://i.imgur.com/EsrCYJ5.png

       https://i.imgur.com/VgdUT1i.png

Customers

       https://i.imgur.com/YtCF5va.png

       https://i.imgur.com/2MplaaB.png

Clef Reaction Gifs

We're having so much fun with Reaction GIFs! The next time you log in with Clef, you’ll have the chance to record your reaction in the most immortal format — a GIF! Plus, we’ll be sending out Clef t-shirts to the folks who make our favorite Reaction GIFs — so go check it out and let us see your Clef Face! https://i.imgur.com/ZDgZ84M.png https://i.imgur.com/8dqQZqK.png

Team

	https://i.imgur.com/OTmg53i.png	Brennen Byrne - CEO Brennen Byrne previously worked at Adobe and H. Bloom, where he focused on mobile development and platform consistency. He holds a BA in Computer Science and English from Pomona College.
	https://i.imgur.com/PAgAY10.png	Mark Hudnall - CTO Mark Hudnall previously worked at Ning and Minted, where he focused on mobile development. He holds a BA in Computer Science from Pomona College.
	https://i.imgur.com/QHY9OnP.png	Jesse Pollak - CPO Jesse Pollak previously worked at BuzzFeed and was a hackNY fellow. He attended Pomona College where he studied Computer Science and Linguistics.

Clef in the News

LA Times - July 24 2013 Initiative protests passwords and demands better ways to log in Upstart Business Journal - July 24 2013 Petition Against Passwords goes public NewYorkTimes - December 18, 2013 New Clef Plug-In Lets You Forget About Your Password Make Tech Better - January 2, 2015 Abandon your passwords with Clef and Waltz TechCrunch - February 18, 2015 Clef Offers Two-Factor Authentication Without All The Codes Gizmag - February 22, 2015 Clef wants to change the way we log into websites Canadian Reviewer - February 22, 2015 Clef set to revolutionize website logins Bitcoinist.net - March 5, 2015 Clef: Bitcoin Adoption and Phishing Protection NewsBTC - March 6, 2015 Clef – Enhanced 2FA Security Inspired By Bitcoin BitQuick - March 12, 2015 BitPay, CrowdCurity, BitGo, and Clef speak on Bitcoin Security at BitPanel AL.com - March 17, 2015 Meet Huntsville native Brennen Byrne, one of Forbes' 12 most impressive young entrepreneurs L’Atelier BNP Paribas - March 19, 2015 Clef Improves Two-Factor Online Authentication Bitcoinist.net - March 19, 2015 Koinify Integrates Clef For More Secure 2FA BraveNewCoin - March 20, 2015 Clef: Enhancing Security In The Bitcoin World CoinTelegraph - April 4, 2015 Security Is More than a Password — It's a Signature BraveNewCoin - April 20, 2015 Bitspark Implements Clef, ‘Authentication From the Future’ CoinTelegraph - April 23, 2015 The Rising Wave of Crypto Two-Factor Authentication NewsBTC - May 01, 2015 Multi-Factor Authentication and You Inside Bitcoins - May 01, 2015 Clef’s Success Story: Protecting the Factom Token Sale Bitcoinist.net - May 19, 2015 AlphaPoint Adopts Clef’s No-Password Two-Factor Authentication CoinBuzz - May 19, 2015 AlphaPoint Announces Clef Support Inside Bitcoins - May 19, 2015 AlphaPoint Adopts Clef’s No-Password Two-Factor Authentication Bitcoin Magazine - May 19, 2015 AlphaPoint Integrates 2FA Service Clef for Secure Logins to Bitcoin Exchanges CoinDesk - May 19, 2015 AlphaPoint Announces Clef Support - Press Release NewsBTC - May 19, 2015 AlphaPoint Bitcoin Exchange Platform Adopts Clef Security Bitcoin Magazine - May 26, 2015 BitQuick Goes Passwordless CoinDesk - May 26, 2015 BitQuick Goes Passwordless PRWeb - May 26, 2015 BitQuick Goes Passwordless Using Clef’s Two-factor Authentication CoinTelegraph - May 27, 2015 MAY 27 DIGEST: Block Chain Summit Kicks Off on Richard Branson's Private Island, Xapo Announces Advisory Board AllCoinsNews - May 27, 2015 BitQuick Selects Clef for 2 Factor Authentication Business Insider - June 3, 2015 Passwords simply don't work — here’s how people are trying to fix the problem Bitcoinist.net - June 16, 2015 Clef: Building A Supportive Bitcoin Community Inside Bitcoins - June 16, 2015 Clef: Building A Supportive Bitcoin Community in Oakland NewsBTC - June 17, 2015 Blockchain Startup Builds Bitcoin Community in Oakland Money & Tech - June 18, 2015 Blockchain Startup Builds Bitcoin Community in Oakland

Videos

Clef
Login with Clef

https://i.imgur.com/1bwTDXe.png

Clef
The future of logging in

https://i.imgur.com/YHUIivg.png

TechCrunch
Clef Two-Factor Authentication with Your Phone

https://i.imgur.com/nOP9IeW.png

Decentral Vancouver
Salon Talks: COINFEST 2015: Vanbex Edition!
Synereo, Factom, Trustatom, Etherparty, Opalcoin, Clef

https://i.imgur.com/qIPBAAI.png

Brennen Byrne
Security for the rest of us

https://i.imgur.com/bPf0DH8.png

Decentral Talk Live Ep #67: Brennen Byrne of Clef
Clef's CEO interviewed by Decentral.TV Talk Live
during the 2015 Texas Bitcoin Conference.

https://i.imgur.com/99HIMni.png

Get in touch

https://i.imgur.com/UZmyeII.png

https://i.imgur.com/EQcS9nm.png

https://i.imgur.com/JgmumPF.png

https://i.imgur.com/e5OeeHR.png

https://i.imgur.com/cAeLQkf.png

https://i.imgur.com/nbbYAN2.png

https://i.imgur.com/1BX7fWy.png

https://i.imgur.com/wJ5mjrG.png

https://i.imgur.com/BPo5VQ1.png

We are based in Oakland, California

https://i.imgur.com/dgTRWax.png

https://i.imgur.com/LCFmD91.png

https://i.imgur.com/EFsDPWv.gif

GETCLEF.COM

[fthoughts]

Pretty sure this could be a way to make 2 factor authentication easy for exchanges to implement, then maybe we will start seeing less of what happened to blockchain.info and others. Exchanges and wallet providers *need* a secure way to keep their login details from prying eyes, and as far as I can tell Clef is actually a solution. Bitstamp, Coinbase, you guys need to listen and pay attention here.

[YESConnie]

I'm excited that I came across this! CLEF looks absolutely amazing; way better than Authy and Google Authenticator. This can add a cool factor to help bitcoin go mainstream too. Imagine being able to access your wallet with CLEF. Whoever adopts this first will have a great competitive advantage.

[fordlincoln]

I like that Clef is using Public / Private key crypto for 2FA -

[starsoccer9]

Clef makes it easy to replace passwords. For example rather then going to login to bitstamp with your username, password, and then 2fa, you can just login using your phone. It is quick and easy.

[MrDjAK]

Excelent job

[Cryptowatch.com]

Very interesting. Will definately look closer into this. Don't like the fingerprint idea, but I see there's alternatives to that which is good.

Any plans for supporting jolla phones?

[fordlincoln]

Interesting - didnt hear about Jolla phones before this but found that they use Sailfish OS:

"Sailfish OS has the in-built capability to run Android™ apps on your Jolla. So you can continue using your favourite apps like Instagram, Facebook, WhatsApp and Twitter as well as downloading all the latest ones via the Yandex and Aptoide Stores and other Android™ marketplaces."

As the Clef app is on Android, it would appear to work on Jolla - curious about this, please post here if this works for you

[YESConnie]

Very interesting. Will definately look closer into this. Don't like the fingerprint idea, but I see there's alternatives to that which is good.

Any plans for supporting jolla phones?

Yeah, Clef feels very different than other 2FAs (but in a great way). I'm interested in seeing the growth and expansion of it on many different sites.

[sidhujag]

Clef makes it easy to replace passwords. For example rather then going to login to bitstamp with your username, password, and then 2fa, you can just login using your phone. It is quick and easy.

Bitstamp would need to add the clef plugin.. And trust the central server...

Can this not be done trustlessly? I mean we are on bitcointalk right?

[Cryptowatch.com]

Clef makes it easy to replace passwords. For example rather then going to login to bitstamp with your username, password, and then 2fa, you can just login using your phone. It is quick and easy.

Bitstamp would need to add the clef plugin.. And trust the central server...

Can this not be done trustlessly? I mean we are on bitcointalk right?

Any 2FA system should be trustless and open source.

[sidhujag]

Clef makes it easy to replace passwords. For example rather then going to login to bitstamp with your username, password, and then 2fa, you can just login using your phone. It is quick and easy.

Bitstamp would need to add the clef plugin.. And trust the central server...

Can this not be done trustlessly? I mean we are on bitcointalk right?

Any 2FA system should be trustless and open source.

i dont think this one is

[fordlincoln]

Clef makes it easy to replace passwords. For example rather then going to login to bitstamp with your username, password, and then 2fa, you can just login using your phone. It is quick and easy.

Bitstamp would need to add the clef plugin.. And trust the central server...

Can this not be done trustlessly? I mean we are on bitcointalk right?

Any 2FA system should be trustless and open source.

i dont think this one is

Not every 2FA system is trustless nor open source. Google Auth and Authy are certainly not.

Clef documentation outlines they don't hold any private keys. The private key is kept on your phone and only the public key is shared with the Clef server to authenticate the OAuth handshake.

http://docs.getclef.com/v1.0/docs/authenticating-users

[sidhujag]

Clef makes it easy to replace passwords. For example rather then going to login to bitstamp with your username, password, and then 2fa, you can just login using your phone. It is quick and easy.

Bitstamp would need to add the clef plugin.. And trust the central server...

Can this not be done trustlessly? I mean we are on bitcointalk right?

Any 2FA system should be trustless and open source.

i dont think this one is

Not every 2FA system is trustless nor open source. Google Auth and Authy are certainly not.

Clef documentation outlines they don't hold any private keys. The private key is kept on your phone and only the public key is shared with the Clef server to authenticate the OAuth handshake.

http://docs.getclef.com/v1.0/docs/authenticating-users

So they can lure in open source projects and then jack the rates up at will or sell information they gather to seo's? Ya sure

[fordlincoln]

Clef makes it easy to replace passwords. For example rather then going to login to bitstamp with your username, password, and then 2fa, you can just login using your phone. It is quick and easy.

Bitstamp would need to add the clef plugin.. And trust the central server...

Can this not be done trustlessly? I mean we are on bitcointalk right?

Any 2FA system should be trustless and open source.

i dont think this one is

Not every 2FA system is trustless nor open source. Google Auth and Authy are certainly not.

Clef documentation outlines they don't hold any private keys. The private key is kept on your phone and only the public key is shared with the Clef server to authenticate the OAuth handshake.

http://docs.getclef.com/v1.0/docs/authenticating-users

So they can lure in open source projects and then jack the rates up at will or sell information they gather to seo's? Ya sure

Lure in open source projects? Not sure where that came from as it's purely a 2FA alternative to whats already out there. Atleast they don't share your information without permission.

It's free for users unless you're a website owner.
They get usage analytics -

Projects in Bitcoin that are using it currently:
Koinify.com
Betmoose.com


"Clef does not share personally identifiable information with third parties without your permission. When you register at a new site that integrates Clef, we will notify you of what information the site requires and you must give permission in order for us to share it. Once you approve, the other site owns that information and we are not responsible for their use.

Clef does not sell, rent, or lease its customer lists to third parties.

Clef keeps track of websites users log in to using Clef. Any information you provide on those sites is shared with the owner of that site and subject to their privacy policy. Our privacy policy does not apply to such sites, and we are not responsible for the content or privacy and security practices and/or policies of those sites."
https://getclef.com/privacy/

[oraclechain]

Clef wave needs to be synced to complete the OAuth at the redirect URL which means that the cryptographic handshake never happens on Clef.

   http://docs.getclef.com/v1.0/docs/authenticating-users

[Clef]

Clef Announces True Logins: the first tool to protect against phishing attacks

True Logins add a simple check when you log into a new computer.
After you sync the Wave, Clef temporarily redirects you to a safe site and your phone asks a simple question to confirm you’re in the right place.
If anything is suspicious, Clef cancels the login and sends you to getclef.com where we can be sure you aren’t being phished.
Otherwise, you’re logged in like normal and we remember the computer so you only have to do the extra step once.

Check out our blog post for more details.

https://i.imgur.com/MaqbkNe.png

[Clef]

https://i.imgur.com/0luUT2a.png

[ikydesu]

This is incredible security project which recently the security is most important for all website service. I hope it will implemente to exchanger bitcoin which a susceptible from hacking attack.


~iki

[true-asset]

I think the OP needs to outline the business model of Clef. How do you guys pay for all the servers and bandwidth? How do you guys pay for the technical and support staff?