[ANN] Clef is secure two-factor authentication with no passwords or tokens

[Clef]

Why so pricey?

Can you tell us more about how you think it is pricey? We appreciate the feedback.

[coinking]

We are thrilled to announce that Bitspark has now implemented Clef authentication.

The CEO of Bitspark George Harrap said, “Our whole team got excited about the technology and the integration was really quick.”

“It is absolutely critical that we find ways to make Bitcoin useful to more people, and I’m excited that Clef can help make that happen. We need to be
building security that is approachable and that people actually have access to, because that's the only way we're ever going to succeed as an ecosystem.
When we think about the next generation of Bitcoin technology, Bitspark is exactly the kind of product that gets us excited.”
Stated Brennen Byrne, CEO and co-founder of Clef.


 
The news are featured on Brave New Coin:
Bitspark Implements Clef, ‘Authentication From the Future’

This is a big step in the right direction. Congrats on the partnership

[Clef]

We're having so much fun with Reaction GIFs!

The next time you log in with Clef, you’ll have the chance to record your reaction in the most immortal format — a GIF!

Plus, we’ll be sending out Clef t-shirts to the folks who make our favorite Reaction GIFs — so go check it out and let us see your Clef Face!

https://i.imgur.com/ioBM6Lg.png

[Clef]

Ziftr is Revolutionizing Shopping — Without Passwords

Clef continues to spread among Bitcoin/cryptocurrency companies today as you can start using Clef to log in to ziftrPAY, a credit card payment platform. E-commerce is an important place for cryptocurrency to gain adoption, and Ziftr is building all of the critical pieces of infrastructure to make it work. We believe in the huge potential of ziftrPAY and are excited for Clef users to try it out!

“With ziftrPAY, we’re creating a simple, secure shopping experience for merchants and shoppers, so it makes perfect sense for us to incorporate two-factor authentication from a company that also values simplicity and security,” said Bob Wilkins, CEO of Ziftr. “This partnership with Clef brings together two innovative companies that are reinventing user experiences and making waves in our respective industries.”

"Usability is the missing ingredient keeping cryptocurrency from going mainstream, which is what makes us so excited to be working with Ziftr,” said Brennen Byrne, CEO of Clef. “With ziftrPAY, they're helping bring a whole new tier of merchants into the fold and making it easier for anyone to pay."

What’s the partnership between Ziftr and Clef all about?
ziftrPAY, the next-generation cryptocurrency and credit card payment platform and customer loyalty program, will be integrating Clef to provide enhanced security and convenience for ziftrPAY users.
ziftrPAY users will essentially have the option of signing into their accounts using Clef or using a traditional password login.

At Clef, we really believe in the power of cryptocurrencies and making them easier to use, and Ziftr fits perfectly with our vision. That’s why, as a part of this partnership, we’ll also be using ziftrPAY for payments from the sites that use Clef’s premium tiers. We’re impressed with the tools Ziftr has built and are excited to be using them ourselves.

There’s no doubt about it: People love having options! This partnership between Ziftr and Clef gives both ziftrPAY and Clef users the freedom of choice: whether it’s about how they log in to the ziftrPAY platform or how they pay for Clef’s services.

For more on ziftrPAY, visit https://www.ziftrPAY.com.
For more on Clef, visit https://www.getclef.com.

http://d2p68wmhm6quvw.cloudfront.net/assets/images/new_homepage/ziftr_big_logo.png

[coin@coin]

You guys have been busy. I'll be testing the GIFs reactions, I saw some of the ones already made on Twitter: they are hilarious!
I fancy myself a Clef t-shirt, of course if you favorite me! 

And the ziftrPAY integration is also good news. Well done to the Clef Team.
I wish it could be implemented on more exchanges but I think I mentioned that before...

Keep us posted.

 

[Clef]

You guys have been busy. I'll be testing the GIFs reactions, I saw some of the ones already made on Twitter: they are hilarious!
I fancy myself a Clef t-shirt, of course if you favorite me! 

And the ziftrPAY integration is also good news. Well done to the Clef Team.
I wish it could be implemented on more exchanges but I think I mentioned that before...

Keep us posted.

 

Feel free to submit your GIF by using the Facebook and Twitter share buttons once it is uploaded.
We keep an eye on all submission and look forward to new ones.

We are in talks with many Bitcoin related projects and companies and will keep posting updates and news as they come.
Thank you for the support.

[Clef]

We are featured on CoinTelegraph today.

The Rising Wave of Crypto Two-Factor Authentication

https://i.imgur.com/ZODBadP.jpg

[starsoccer9]

Cool another great partnership. When will I be able to login to bitcointalk with clef? 

[Clef]

Cool another great partnership. When will I be able to login to bitcointalk with clef?  

We are open to help anyone implement Clef. It would be a pleasure to have Bitcointalk integrate Clef.

[coinking]

Ziftr is Revolutionizing Shopping — Without Passwords

Clef continues to spread among Bitcoin/cryptocurrency companies today as you can start using Clef to log in to ziftrPAY, a credit card payment platform. E-commerce is an important place for cryptocurrency to gain adoption, and Ziftr is building all of the critical pieces of infrastructure to make it work. We believe in the huge potential of ziftrPAY and are excited for Clef users to try it out!

“With ziftrPAY, we’re creating a simple, secure shopping experience for merchants and shoppers, so it makes perfect sense for us to incorporate two-factor authentication from a company that also values simplicity and security,” said Bob Wilkins, CEO of Ziftr. “This partnership with Clef brings together two innovative companies that are reinventing user experiences and making waves in our respective industries.”

"Usability is the missing ingredient keeping cryptocurrency from going mainstream, which is what makes us so excited to be working with Ziftr,” said Brennen Byrne, CEO of Clef. “With ziftrPAY, they're helping bring a whole new tier of merchants into the fold and making it easier for anyone to pay."

What’s the partnership between Ziftr and Clef all about?
ziftrPAY, the next-generation cryptocurrency and credit card payment platform and customer loyalty program, will be integrating Clef to provide enhanced security and convenience for ziftrPAY users.
ziftrPAY users will essentially have the option of signing into their accounts using Clef or using a traditional password login.

At Clef, we really believe in the power of cryptocurrencies and making them easier to use, and Ziftr fits perfectly with our vision. That’s why, as a part of this partnership, we’ll also be using ziftrPAY for payments from the sites that use Clef’s premium tiers. We’re impressed with the tools Ziftr has built and are excited to be using them ourselves.

There’s no doubt about it: People love having options! This partnership between Ziftr and Clef gives both ziftrPAY and Clef users the freedom of choice: whether it’s about how they log in to the ziftrPAY platform or how they pay for Clef’s services.

For more on ziftrPAY, visit https://www.ziftrPAY.com.
For more on Clef, visit https://www.getclef.com.

Great update!

[coinking]

Cool another great partnership. When will I be able to login to bitcointalk with clef? 

In due time

[coin@coin]

There are some really cool Reaction GIFs on Clef's Twitter: https://twitter.com/getclef. 

I think one of the best ones is this one:

https://twitter.com/sashalives/status/590172262726144001

This one is wicked!

https://twitter.com/getclef/status/590202196450365441

And this one:

https://twitter.com/carbonsoldier/status/589048964181336064

What other ones do you guys like?

[The Bitcoin Co-op]

Andrew wrote a great piece on multifactor authentication that talks a lot about Clef. Check it out: http://www.newsbtc.com/2015/05/01/multi-factor-authentication/

[Clef]

http://www.newsbtc.com/wp-content/uploads/2015/04/MULTI-FACTOR-AUTHENTICATION-300x150.png

Andrew wrote a great piece on multifactor authentication that talks a lot about Clef. Check it out: http://www.newsbtc.com/2015/05/01/multi-factor-authentication/

Thanks for sharing it with us. Will add to our article list in the OP. 

[Clef]

Another article about Clef on Inside Bitcoins.

We are pleased to have been of help to both Factom and Koinify to protect their Software Sale.

Clef’s Success Story: Protecting the Factom Token Sale

[coinking]

I think for most people it's hard for them to justify switching providers if they've been using one that works well for so long. Incentivizing the switch could be a good marketing move. Signature campaign, contests, draws and/or more media and user engagement is the key. I know for me I like to listen to recorded interviews or watch vids. Keep it up guys, you're doing great stuff here.

[starsoccer9]

I think for most people it's hard for them to justify switching providers if they've been using one that works well for so long. Incentivizing the switch could be a good marketing move. Signature campaign, contests, draws and/or more media and user engagement is the key. I know for me I like to listen to recorded interviews or watch vids. Keep it up guys, you're doing great stuff here.

agreed, I think most companies dont realize how insecure other 2Fa solutions are until it is to late.

[Clef]

https://i.imgur.com/Y8BKzWI.png

http://getclef.com/whitehat Our whitehat & bug bounty program At Clef, we're building usable two-factor authentication for consumers. We take the security and privacy of our users very seriously, and we welcome working with security experts to make our product, and the Internet, better. If you believe you've found a vulnerability, we'd love to work with you through our Responsible Disclosure Program. Please include a detailed summary of the issue you discovered so we can reproduce it and assess its severity. Rewards The minimum reward offered to whitehat researchers is $32 USD (paid in Bitcoin or USD, your choice). To earn a reward, you must report a previously unknown vulnerability of sufficient severity. Eligibility To be eligible, you must: Be the first person to responsibly disclose the bug. Report a bug that could compromise our users' private data, circumvent authentication or system protections, or enable access within our infrastructure. Assist in our review of the issue (on a case-by-case basis) to determine if you are eligible. A good report has: Detailed steps for reproducing the bug. A concrete attack scenario answering how the vulnerability in question would impact Clef or our customers. Scope & rules of engagement The following web properties owned by Clef are in scope for the program: getclef.com (our main site). *.clef.io (our API server). We are especially interested in vulnerabilities in our API or vulnerabilities which may allow unauthorized access/logins. The following web properties are not in scope for the program: support.getclef.com (not hosted by us). docs.getclef.com (not hosted by us). blog.getclef.com (a WordPress site). Customer sites or sites which have integrated with Clef are also out of scope. Our mobile apps are also currently out of scope, but we are constantly re-evaluating this program. The following conditions are also not in scope for this program. Any of the activities below will disqualify participation from the program: Intentionally harming the experience or usefulness of Clef to others (i.e. Denial-of-service). Attempts to view, modify, or damage data belonging to others. Physical attacks against Clef employees, offices, and data centers. Social engineering of Clef employees, contractors, vendors, or service providers. Knowingly posting, transmitting, uploading, linking to, or sending any malware. Pursuing vulnerabilities which send unsolicited bulk messages (spam) or unauthorized messages. Any vulnerability obtained through the compromise of a Clef customer or employee accounts. If you need to test a vulnerability, please create a free account. Disclosure To disclose a security vulnerability, please email security@getclef.com with a detailed report on the issue. You can find our PGP public key below. -----BEGIN PGP PUBLIC KEY BLOCK----- Version: SKS 1.1.4 Comment: Hostname: pgp.mit.edu mQENBFH0CDYBCADQPUcOhTolB0sn1b265xqWnxINHyZoN6Qqf05aulFYmkFgK6wdicLBHcmP JYmi+mwpRgQ+ye5jYniE6ojM1hN4D+cOAQ/eTJ6nHDykSkV5RWeB65kWopSJQPeJwTGE0+Xr Sb5cRyxAdj2sVk8ri0gDxpL/E6c8CwRxsgCJKmnoUJCZsXp4MsguFbzZirRSLRSNkY3MV1Ui OQ92AVzpS+Er9atlYI0WjXWj1to8H6zXBdn59nO2kWYJIJo7cDDbbwjBi98cMTm3UFlvhH6q rI0ROV9yltikk9VjtvB6aaxPjEPb2lI2m7qY42YGXSpye6xmen8gYCeGxMkiA1jBaeStABEB AAG0JENsZWYgU2VjdXJpdHkgPHNlY3VyaXR5QGdldGNsZWYuY29tPokBPQQTAQoAJwUCUfQI NgIbLwUJB4YfgAULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRDn3SaPdx/BZJ30CACYr5Xo YDENwHxRJ3RCA6e95FY3NUcHCRG5JHUgTX+m+YMDZG6ldJqZYsr036ODLQm/L37l2J13ddze 9mwZZDL+GOxHb4jN8FXoc7t6HGGIYqHCoTHl1i0cEXC6dxFeGlecLPDQOHS53NqvlzFOcsno QqwvFMm8ZmY+ZxyQ0+9IFOW9Z17OflYknlc3Nhy176yAwfEOqF9sQlqhFe+bu6O/RO8xjqss m/R42B+wOrEUPT93Vesqfk3TkytHdApLRkKYfimpn7/tAKddsMaIltO+rlUXuRgkaXOT8veO VXLf/6rOAcqvoB+uLazyY7OfBH2/P3j+SIROyIk8zVf1xGgouQENBFH0CDYBCAC+nb2nphOp eHCQXI9WtZoKnXHtsLMylAstBtjj99sF8a//vjj0N5lRaqBCZ/294E69EOQNiPcrMiR96vo9 y2symlK27/DZFMHnlM1J3eglaiRXKkdwgfVHBSDMJAaH3vB65sGr9WyigTUWTlfuM92BAwyM 5dz7U0FZWUpjP/mHumA6mFQ2CLmbBS60qpfb5Zg6ajkauoa7HhwbY/3l5SvnxAWdhldEDW37 mfNPlbBUcUJPz+6TaeVGwPe0PJaSDc3xcNO8dG7pt4+wGybE0yi3LnttRYyANUhrUNEHcxwg 0B2oa8tr3hcYpBdgI6wRhQGvYidkj9sYRaO6lPy/tNCvABEBAAGJAkQEGAEKAA8FAlH0CDYC Gy4FCQeGH4ABKQkQ590mj3cfwWTAXSAEGQEKAAYFAlH0CDYACgkQjTg/jWOnu5UQuQgAidJ4 VsHYNIiz3MPnaBtzSx0PCXAlNavFE+Kys6WX7qEZwuHhhrIQSiYJKJwkidU/SHORww7eHS7Z 7luvi9BTPoyQ0cbVEwfRL7QzJY4cVJflqGPNx4M08aJ6CCMeSEHUa8hYPUvlWZJNzlDhsXmI NHND/l+CJsLO/V51fP1n9/kC157Za9zBXV0wlDwj5DhiR8LP9zn6fDV6pfmb3TvNyxZExCNK uj7CF3oO2IEloqJPwF/G4do1AzDBo9LqvetZ4z1CWJbP/NsbPWHG5jY5oFe3QJaM2bbrMQ5B ryXLM37s1PwGd4lvt+AiX6ApVwAIG+RFhDoPLFCgKezyEYc+XDlPB/wIh8DBV5Q4wOw9GaJo 3MLbQG/MoAbgU9bsT49Ex7V8bB3AVlmQbTYKA4BdvlgumvS9kNwhkgyPX8g4052vIIG4Rp+A 1DaIdwq/SyA2JAvFAm72543hfXPE/biu3YPMx9djCKDM8ALpkfmuyMxEstcKaL0oHlWExroQ v/iMZrSN2lwJQzYNgy34rQD7UQlFF3TljjOgNdovXGf4k6WkDNDBLT+Za4UkIlDxxPUo/pxB gD4FwXvolaGUOziG3iQr+Fml0W9M8Plt9g0ggbxks73UmWNNAMC795d5ctucpm4lbAvCuIdc tXzyREbMFtpa/Yt5xIV6IaZyQUfXSzdMUWvP =FThV -----END PGP PUBLIC KEY BLOCK-----

[Clef]

Check out our new promo thread:

Share Your Reaction GIFs and Win Clef Swag

[coinking]

http://getclef.com/whitehat Our whitehat & bug bounty program At Clef, we're building usable two-factor authentication for consumers. We take the security and privacy of our users very seriously, and we welcome working with security experts to make our product, and the Internet, better. If you believe you've found a vulnerability, we'd love to work with you through our Responsible Disclosure Program. Please include a detailed summary of the issue you discovered so we can reproduce it and assess its severity. Rewards The minimum reward offered to whitehat researchers is $32 USD (paid in Bitcoin or USD, your choice). To earn a reward, you must report a previously unknown vulnerability of sufficient severity. Eligibility To be eligible, you must: Be the first person to responsibly disclose the bug. Report a bug that could compromise our users' private data, circumvent authentication or system protections, or enable access within our infrastructure. Assist in our review of the issue (on a case-by-case basis) to determine if you are eligible. A good report has: Detailed steps for reproducing the bug. A concrete attack scenario answering how the vulnerability in question would impact Clef or our customers. Scope & rules of engagement The following web properties owned by Clef are in scope for the program: getclef.com (our main site). *.clef.io (our API server). We are especially interested in vulnerabilities in our API or vulnerabilities which may allow unauthorized access/logins. The following web properties are not in scope for the program: support.getclef.com (not hosted by us). docs.getclef.com (not hosted by us). blog.getclef.com (a WordPress site). Customer sites or sites which have integrated with Clef are also out of scope. Our mobile apps are also currently out of scope, but we are constantly re-evaluating this program. The following conditions are also not in scope for this program. Any of the activities below will disqualify participation from the program: Intentionally harming the experience or usefulness of Clef to others (i.e. Denial-of-service). Attempts to view, modify, or damage data belonging to others. Physical attacks against Clef employees, offices, and data centers. Social engineering of Clef employees, contractors, vendors, or service providers. Knowingly posting, transmitting, uploading, linking to, or sending any malware. Pursuing vulnerabilities which send unsolicited bulk messages (spam) or unauthorized messages. Any vulnerability obtained through the compromise of a Clef customer or employee accounts. If you need to test a vulnerability, please create a free account. Disclosure To disclose a security vulnerability, please email security@getclef.com with a detailed report on the issue. You can find our PGP public key below. -----BEGIN PGP PUBLIC KEY BLOCK----- Version: SKS 1.1.4 Comment: Hostname: pgp.mit.edu mQENBFH0CDYBCADQPUcOhTolB0sn1b265xqWnxINHyZoN6Qqf05aulFYmkFgK6wdicLBHcmP JYmi+mwpRgQ+ye5jYniE6ojM1hN4D+cOAQ/eTJ6nHDykSkV5RWeB65kWopSJQPeJwTGE0+Xr Sb5cRyxAdj2sVk8ri0gDxpL/E6c8CwRxsgCJKmnoUJCZsXp4MsguFbzZirRSLRSNkY3MV1Ui OQ92AVzpS+Er9atlYI0WjXWj1to8H6zXBdn59nO2kWYJIJo7cDDbbwjBi98cMTm3UFlvhH6q rI0ROV9yltikk9VjtvB6aaxPjEPb2lI2m7qY42YGXSpye6xmen8gYCeGxMkiA1jBaeStABEB AAG0JENsZWYgU2VjdXJpdHkgPHNlY3VyaXR5QGdldGNsZWYuY29tPokBPQQTAQoAJwUCUfQI NgIbLwUJB4YfgAULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRDn3SaPdx/BZJ30CACYr5Xo YDENwHxRJ3RCA6e95FY3NUcHCRG5JHUgTX+m+YMDZG6ldJqZYsr036ODLQm/L37l2J13ddze 9mwZZDL+GOxHb4jN8FXoc7t6HGGIYqHCoTHl1i0cEXC6dxFeGlecLPDQOHS53NqvlzFOcsno QqwvFMm8ZmY+ZxyQ0+9IFOW9Z17OflYknlc3Nhy176yAwfEOqF9sQlqhFe+bu6O/RO8xjqss m/R42B+wOrEUPT93Vesqfk3TkytHdApLRkKYfimpn7/tAKddsMaIltO+rlUXuRgkaXOT8veO VXLf/6rOAcqvoB+uLazyY7OfBH2/P3j+SIROyIk8zVf1xGgouQENBFH0CDYBCAC+nb2nphOp eHCQXI9WtZoKnXHtsLMylAstBtjj99sF8a//vjj0N5lRaqBCZ/294E69EOQNiPcrMiR96vo9 y2symlK27/DZFMHnlM1J3eglaiRXKkdwgfVHBSDMJAaH3vB65sGr9WyigTUWTlfuM92BAwyM 5dz7U0FZWUpjP/mHumA6mFQ2CLmbBS60qpfb5Zg6ajkauoa7HhwbY/3l5SvnxAWdhldEDW37 mfNPlbBUcUJPz+6TaeVGwPe0PJaSDc3xcNO8dG7pt4+wGybE0yi3LnttRYyANUhrUNEHcxwg 0B2oa8tr3hcYpBdgI6wRhQGvYidkj9sYRaO6lPy/tNCvABEBAAGJAkQEGAEKAA8FAlH0CDYC Gy4FCQeGH4ABKQkQ590mj3cfwWTAXSAEGQEKAAYFAlH0CDYACgkQjTg/jWOnu5UQuQgAidJ4 VsHYNIiz3MPnaBtzSx0PCXAlNavFE+Kys6WX7qEZwuHhhrIQSiYJKJwkidU/SHORww7eHS7Z 7luvi9BTPoyQ0cbVEwfRL7QzJY4cVJflqGPNx4M08aJ6CCMeSEHUa8hYPUvlWZJNzlDhsXmI NHND/l+CJsLO/V51fP1n9/kC157Za9zBXV0wlDwj5DhiR8LP9zn6fDV6pfmb3TvNyxZExCNK uj7CF3oO2IEloqJPwF/G4do1AzDBo9LqvetZ4z1CWJbP/NsbPWHG5jY5oFe3QJaM2bbrMQ5B ryXLM37s1PwGd4lvt+AiX6ApVwAIG+RFhDoPLFCgKezyEYc+XDlPB/wIh8DBV5Q4wOw9GaJo 3MLbQG/MoAbgU9bsT49Ex7V8bB3AVlmQbTYKA4BdvlgumvS9kNwhkgyPX8g4052vIIG4Rp+A 1DaIdwq/SyA2JAvFAm72543hfXPE/biu3YPMx9djCKDM8ALpkfmuyMxEstcKaL0oHlWExroQ v/iMZrSN2lwJQzYNgy34rQD7UQlFF3TljjOgNdovXGf4k6WkDNDBLT+Za4UkIlDxxPUo/pxB gD4FwXvolaGUOziG3iQr+Fml0W9M8Plt9g0ggbxks73UmWNNAMC795d5ctucpm4lbAvCuIdc tXzyREbMFtpa/Yt5xIV6IaZyQUfXSzdMUWvP =FThV -----END PGP PUBLIC KEY BLOCK-----

This is great idea. When will the bug bounty program end?