Two-factor authentication is an additional layer of security and is required every time you log in to Griffin or make a payment. You must authenticate using a passkey stored on a security device of your choice.

We use a web standard protocol called WebAuthn to generate a private passkey, which is stored on your security device. This is paired with a public key that is stored on our servers and associated with your account. Both pieces of the pair are needed to generate the authentication token that allows you to log in.