Security

BlockFi Implements Auth0 to Make Authentication Easier and More Secure

Published, 28 October, 2020

As BlockFi’s security journey continues, we’ve identified a number of areas where we can improve user experience and security. A key focus has been client authentication on our platform. Currently, we offer two-factor authentication (2FA) and allowlisting to help keep our clients’ personal data and digital assets protected. And now we’re partnering with Auth0, one of the world’s leading identity-management companies, to make the authentication experience easier and safer than ever before, starting November 3, 2020.

Auth0 provides identity verification and security solutions for some of the largest and most complex use cases, serving global enterprises across 70 countries and securing billions of login transactions every month. It’s a natural fit for BlockFi, since we’re continuing to build an industry-leading security program for an ever-growing, globally distributed user base.

“We help major organizations around the world build the most secure authentication available on the market today,” said Duncan Godfrey, Head of Security at Auth0. “Our capabilities are well-suited for a fast-growing firm like BlockFi, and we’re eager to lend our expertise to provide even greater peace of mind for BlockFi’s clients.”

Authentication is one of the most important security features of any application or platform, and for BlockFi clients, that experience is about to improve dramatically. For one, you’ll notice that the login screen for your BlockFi account will look somewhat different.

In the coming months, you’ll also notice a new and improved two-factor authentication (2FA) process. When attempting to make a withdrawal or perform other important actions, you’ll be able to use a Google Authenticator code instead of relying on legacy 2FA protocols, such as email. In recent months, we’ve made several enhancements to how internal services and users authenticate, and we’re excited that this change will be the first for our client-facing products.

“As many of you have read in my previous posts, the BlockFi security journey is well underway. Moving to Auth0 will enable us to provide a more scalable and secure authorization capability to our client-facing products,” explained Adam Healy, Chief Security Officer at BlockFi. “We are excited to take full advantage of the new capabilities Auth0 brings and I encourage all of our clients to log in and set up 2FA.”

We will be gradually transitioning clients over the next few months to Auth0. When you’ve been selected to be migrated, if you have 2FA enabled, you will be required to enter your existing 2FA challenge and then re-setup 2FA. If you do not have 2FA, we highly suggest to set it up by following these instructions. You will then be seamlessly transitioned upon logging in. You cannot proactively go into your settings to be migrated–BlockFi will handle the migration upon login.

If you have any questions about our new authentication process or want to learn more about BlockFi’s security policies, feel free to reach out to our team at security@blockfi.com. We’d love to hear from you.

Last updated on January 4th, 2022

As of February 14, 2022, the BlockFi Interest Account (BIA) is no longer available to new clients who are US persons or persons located in the US and existing US clients with BIA accounts are unable to transfer new assets to their BIAs. Learn More.

BlockFi Lending LLC NMLS ID#1737520 | NMLS Consumer Access

BlockFi Trading LLC NMLS ID#1873137 | NMLS Consumer Access

Digital currency is not legal tender, is not backed by the government, and crypto accounts held with BlockFi are not subject to FDIC or SIPC protections. Digital currency values are not static and fluctuate due to market changes. Not all products and services are available in all geographic areas and are subject to applicable terms and conditions. Eligibility for particular products and services is subject to final determination by BlockFi. Rates for BlockFi products are subject to change.

BlockFi Rewards Credit Card: For more information, please see BlockFi’s Terms of Service. BlockFi is not a Bank. Cards are issued by Evolve Bank & Trust, Member FDIC, pursuant to a license from Visa® USA Inc. Rewards are not offered by Evolve Bank & Trust and are instead offered and managed by BlockFi.

BlockFi International Ltd. holds a Class F digital assets business license under the Digital Assets Business Act, 2018 (as amended) and is licensed by the Bermuda Monetary Authority to conduct the following digital assets business activities: (i) issuing, selling or redeeming virtual coins, tokens or any other form of digital assets (ii) operating as a digital asset exchange (iii) providing custodial wallet services (iv) operating as a digital asset derivative exchange provider and (v) operating as a digital assets services vendor.

See blockfi.com/terms for more information.

BlockFi Lending LLC NMLS ID#1737520 | NMLS Consumer Access

BlockFi Trading LLC NMLS ID#1873137 | NMLS Consumer Access

See blockfi.com/terms for more information.

BlockFi Implements Auth0 to Make Authentication Easier and More Secure

Share article

Share article