Push with number matching
The sign-in page shows a number. The user enters it in the app and confirms with biometrics. Each request works once and expires in 60 seconds.
Yeap Verify Approve sign-ins with a tap and a number.
Add a second factor to your apps and staff sign-ins. Users match the number on screen in the Yeap Verify app, or use a code when they are offline.
Coming soon This service is in limited availability and not yet open for self-service orders.
- Push with number matching
- TOTP and backup codes
- OIDC hosted page
Sign-in requestPush approval and two-factor sign-in
Waiting- AppAdmin Panel
- Useralice
- Number472
- Expiresin 60 seconds
Capabilities
Strong sign-in without the friction
Approve in the app or with a code
If a push does not arrive, users open the app to approve. TOTP codes work offline, and admins can issue one-time backup codes.
Passkeys
Phishing-resistant passkeys that high-risk apps can require. In development.
Hosted sign-in page
Send users to a hosted verification page with OIDC. SAML and RADIUS are being added.
HMAC-signed API
Start a verification from your server, then poll for the result or receive a webhook.
QR or activation code
Invite users with a QR code or an activation code. Device keys are created in the phone's secure hardware.
How it works
Live in three steps
- 1
Add your app
Register an app and choose the hosted OIDC page or the API.
- 2
Enroll users
Send a QR code or activation code. Users install the app and scan or type it.
- 3
Approve sign-ins
At sign-in, users match the number in the app and return to your app.
Specifications
The details
| Methods | Push with number matching, approve in the app, TOTP, backup codes. Passkeys in development. |
|---|---|
| Integrations | OIDC hosted page. SAML and RADIUS in development. |
| API | HMAC-signed REST API, webhooks, health check |
| Enrollment | QR code or activation code, single use, expires after 72 hours by default |
| Device keys | Kept in secure hardware. Approvals need biometrics or the screen lock. |
| When unreachable | Allow or deny per app. Deny by default. |
FAQ
Frequently asked questions
Can I use Yeap Verify now?
It is in early access. Contact us to request an invitation.
What if a phone has no connection?
Users can enter a TOTP code from the app, which works offline, or a backup code from an admin.
What happens if Yeap Verify cannot be reached?
Each app has a fail-mode setting: deny sign-ins, which is the default, or allow them. Your server can check a health endpoint first.
What does the Not me button do?
It denies the request, raises an alert and can lock the account.
Does it work with Yeap Access?
Yes. Yeap Access is designed to use Yeap Verify as a sign-in factor, including on self-hosted servers.