Multi-factor authentication providing a credential via a contactless card for secure messaging

A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a processor, cause the processor to:

• receive a cryptographically secure credential from a contactless card via a near field communication, wherein the cryptographically secure credential is based on a credential, an account identifier, and a counter value, wherein the counter value is generated by the contactless card;
• send, to a server, a request to request initiation of a secure messaging session with a recipient device, wherein the request comprises the cryptographically secure credential;
• receive, from the server, a response specifying whether cryptographically secure credential is valid based on a counter value maintained by the server, wherein the counter value maintained by the server is synchronized with the counter value generated by the contactless card;
• where response indicates the cryptographically secure credential is valid, receive, from the recipient device, a message via the secure messaging session;
• and
• where response indicates the cryptographically secure credential is not valid, the response further specifies that the initiation of the secure messaging session is rejected.

An apparatus comprising:

• a processor;
• and
• a memory storing instructions that, when executed by the processor, cause the processor to:
• receive a cryptographically secure credential from a contactless card via a near field communication, wherein the cryptographically secure credential is based on a credential, an account identifier, and a counter value, wherein the counter value is generated by the contactless card;
• send, to a server, a request to request initiation of a secure messaging session with a recipient device, wherein the request comprises the cryptographically secure credential;
• receive, from the server, a response specifying whether cryptographically secure credential is valid based on a counter value maintained by the server, wherein the counter value maintained by the server is synchronized with the counter value generated by the contactless card;
• where response indicates the cryptographically secure credential is valid, receive, from the recipient device, a message via the secure messaging session;
• and
• where response indicates the cryptographically secure credential is not valid, the response further specifies that the initiation of the secure messaging session is rejected.