Secure multi-factor user authentication on disconnected mobile devices

A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a computing device to perform operations comprising:

• receiving, on the computing device, a user request to authorize payment for a purchase using an account associated with a payment services provider;
• receiving, using one or more input devices on the computing device, at least one of a biometric authentication signature or a password;
• generating a cryptographic decryption key based on the at least one of the biometric authentication signature or the password;
• decrypting an encrypted payment token stored on the computing device using the cryptographic decryption key;
• and
• using the decrypted payment token to authorize the payment for the purchase using the account associated with the payment services provider.

A computer-implemented method for enabling offline payments, comprising:

• receiving, from a computing device, a request for a payment token to enable offline payment capabilities for an account associated with a payment services provider;
• receiving at least one of a biometric authentication signature or a password corresponding to the account;
• generating a cryptographic authentication key based on the at least one of the biometric authentication signature or the password;
• encrypting the payment token using the cryptographic authentication key to create an encrypted payment token;
• and
• sending the encrypted payment token to the computing device,
• wherein the encrypted payment token is decryptable, while the computing device is offline, using the at least one of the biometric authentication signature or the password, and
• wherein upon being decrypted into the payment token, the payment token is usable to authorize a payment for a purchase.