Trusted Mobile Endpoints Using Webview

A method to prevent second factor phishing, comprising:

• generating a transaction identifier associated with an authentication request received from an external device;
• in response to verifying a first authentication factor of the authentication request, transmitting a prompt and the transaction identifier to the external device, wherein the prompt is an HTTP link associated with a browser comprising a generated cookie and the generated cookie is associated with the transaction identifier;
• receiving a signal comprising a transmitted transaction identifier and an instruction to process the HTTP link;
• instructing an instance of an application installed on the external device to open the browser in a webview in response to processing the instruction, wherein a cookie is provided;
• identifying the generated cookie based on verifying the transmitted transaction identifier;
• and
• determining if the cookie is equivalent to the generated cookie.

A non-transitory computer-readable medium comprising instructions that are configured, when executed by a processor, to:

• generate a transaction identifier associated with an authentication request received from an external device;
• in response to verifying a first authentication factor of the authentication request, transmit a prompt and the transaction identifier to the external device, wherein the prompt is an HTTP link associated with a browser comprising a generated cookie and the generated cookie is associated with the transaction identifier;
• receive a signal comprising a transmitted transaction identifier and an instruction to process the HTTP link;
• instruct an instance of an application installed on the external device to open the browser in a webview in response to processing the instruction, wherein a cookie is provided;
• identify the generated cookie based on verifying the transmitted transaction identifier;
• and
• determine if the cookie is equivalent to the generated cookie.