Push MFA, iOS password manager, APNs authenticator, zero-trust audit logs — all in one API. No SMS. No TOTP seeds. Just cryptographically secure, user-friendly authentication.
Built for security engineers, delivered as a simple REST API.
Deliver one-tap MFA challenges directly to your users' iOS and Android devices via native push notifications. No SMS codes to intercept—no TOTP seeds to steal.
curl -X POST https://api.example.com/api/v1/mfa/send \
-H "X-Client-ID: your_client_id" \
-H "X-Client-Secret: your_client_secret" \
-H "Content-Type: application/json" \
-d '{
"user_ref": "usr_001",
"message": "Login from 192.168.1.1 — approve?"
}'MYPASS Elite ships an AutoFill Credential Provider extension for iOS. Your enterprise apps can inject credentials directly into the iOS credential store — zero clipboard exposure.
Register iOS devices with your own Apple Developer APNs credentials. MYPASS Elite uses your team's APNs key so notifications arrive under your app bundle — branded, trusted.
Every authentication decision is logged, signed, and auditable. MYPASS Elite follows a trust-nothing principle — each factor, device, and session is verified independently.
Get instant callbacks on every authentication event. Integrate MYPASS Elite with any SIEM, ticketing system, or custom workflow with a signed HMAC webhook.
// Verify webhook signature in your receiver
const sig = req.headers['x-mypass-signature'];
const expected = 'sha256=' + hmac('sha256', webhookSecret, rawBody);
if (!timingSafeEqual(sig, expected)) return res.status(401).end();
const event = req.body; // { event, session_ref, status, ... }The MYPASS Elite API is built for SaaS platforms and enterprises operating at scale. One API key pair manages unlimited end-users under your tenant.
Push MFA is categorically more secure than SMS OTP or TOTP apps.
| Feature | MYPASS Elite | SMS OTP | TOTP App |
|---|---|---|---|
| Push MFA (In-App) | — | — | |
| Biometric gate (FaceID/TouchID) | — | — | |
| MITM & SIM-swap resistant | — | ||
| iOS Password Manager extension | — | — | |
| Bring-your-own APNs key | — | — | |
| Signed webhook callbacks | — | — | |
| Device-level revocation | — | — | |
| Immutable audit log | — | — | |
| REST API + OpenAPI docs | — | — | |
| Multi-tenant management | — | — |
Get your API credentials in 2 minutes. Free plan — no credit card required.