Preventing Unauthorized Access to Secured Information Systems Using Multi-Device Authentication Techniques

A method, comprising:

• at a computing platform comprising at least one processor, memory, and a communication interface:
• receiving, by the at least one processor, via the communication interface, and from a client portal server, a request to authenticate a first user to a first user account associated with a client portal provided by the client portal server;
• receiving, by the at least one processor, via the communication interface, and from the client portal server, first device selection input selecting a first registered device and a second registered device to receive one-time passcodes;
• generating, by the at least one processor, a first one-time passcode for the first registered device and a second one-time passcode for the second registered device;
• sending, by the at least one processor, via the communication interface, the first one-time passcode to the first registered device and the second one-time passcode to the second registered device;
• receiving, by the at least one processor, via the communication interface, and from the client portal server, first one-time passcode input;
• validating, by the at least one processor, the first one-time passcode input received from the client portal server;
• based on validating the first one-time passcode input received from the client portal server, generating, by the at least one processor, a first validation message directing the client portal server to provide the first user with access to the first user account;
• and
• sending, by the at least one processor, via the communication interface, to the client portal server, the first validation message directing the client portal server to provide the first user with access to the first user account.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, memory, and a communication interface, cause the computing platform to:

• receive, via the communication interface, and from a client portal server, a request to authenticate a first user to a first user account associated with a client portal provided by the client portal server;
• receive, via the communication interface, and from the client portal server, first device selection input selecting a first registered device and a second registered device to receive one-time passcodes;
• generate a first one-time passcode for the first registered device and a second one-time passcode for the second registered device;
• send, via the communication interface, the first one-time passcode to the first registered device and the second one-time passcode to the second registered device;
• receive, via the communication interface, and from the client portal server, first one-time passcode input;
• validate the first one-time passcode input received from the client portal server;
• based on validating the first one-time passcode input received from the client portal server, generate a first validation message directing the client portal server to provide the first user with access to the first user account;
• and
• send, via the communication interface, to the client portal server, the first validation message directing the client portal server to provide the first user with access to the first user account.