Enhanced security for one time passcode delivery via email

A computing device for authenticating a user, the computing device comprising:

• a hardware processor;
• a memory, the memory storing instructions, which when executed by the hardware processor cause the computing device to perform operations comprising:
• receiving, at a network-based service, an authentication request from a user computing device, the authentication request associated with an account of the network-based service;
• verifying a first credential provided in connection with the authentication request against credentials stored for the account;
• responsive to the first credential being verified, generating, a code object configured for the account, the generating comprising:
• selecting a standardized code object comprising a set of precompiled routines, the precompiled routines configured to, when executed on a receiving computing device, perform a security evaluation of the receiving computing device and generate a one-time passcode;
• and
• inserting, into the standardized code object, a first portion of a seed value associated with the account, the first portion of the seed value being insufficient alone to generate the one-time passcode;
• transmitting an email comprising a reference to the code object to an email address associated with the account;
• receiving, from the code object executing on the receiving computing device, a request for a second portion of the seed value, the request transmitted responsive to the code object determining that the security evaluation of the receiving computing device satisfies a threshold;
• transmitting the second portion of the seed value to the code object, the first portion and the second portion combinable to produce the seed value used to generate the one-time passcode;
• and
• receiving, from the user computing device, the one-time passcode and authenticating the user to the network-based service responsive to the received one-time passcode matching an expected one-time passcode generated by the network-based service using the seed value.

A non-transitory machine-readable medium, storing instructions for authenticating a user, the instructions, which when executed, cause a machine to perform operations comprising:

• receiving, at a network-based service, an authentication request from a user computing device, the authentication request associated with an account of the network-based service;
• verifying a first credential provided in connection with the authentication request against credentials stored for the account;
• responsive to the first credential being verified, generating, a code object configured for the account, the generating comprising:
• selecting a standardized code object comprising a set of precompiled routines, the precompiled routines configured to, when executed on a receiving computing device, perform a security evaluation of the receiving computing device and generate a one-time passcode;
• and
• inserting, into the standardized code object, a first portion of a seed value associated with the account, the first portion of the seed value being insufficient alone to generate the one-time passcode;
• transmitting an email comprising a reference to the code object to an email address associated with the account;
• receiving, from the code object executing on the receiving computing device, a request for a second portion of the seed value, the request transmitted responsive to the code object determining that the security evaluation of the receiving computing device satisfies a threshold;
• transmitting the second portion of the seed value to the code object, the first portion and the second portion combinable to produce the seed value used to generate the one-time passcode;
• and
• receiving, from the user computing device, the one-time passcode and authenticating the user to the network-based service responsive to the received one-time passcode matching an expected one-time passcode generated by the network-based service using the seed value.