Encryption-based data access management

A data storage server comprising:

• at least one processor;
• and
• non-transitory memory storing executable instructions configured to, when executed by the at least one processor, cause the data storage server to:
• receive, from a client device, a user authentication request for decrypting encrypted data;
• transmit, to the client device, a validation token associated with the user authentication request, the validation token indicating that the client device successfully authenticated;
• receive, from a second device that is different than the client device, a confirmation request associated with the validation token;
• and
• transmit, to the second device, a confirmation indicating that the client device is authenticated.

One or more non-transitory computer-readable media storing computer-readable instructions that, when executed by at least one processor, cause one or more data storage servers to:

• receive, from a client device, a user authentication request for decrypting encrypted data;
• transmit, to the client device, a validation token associated with the user authentication request, the validation token indicating that the client device successfully authenticated;
• receive, from a second device that is different than the client device, a confirmation request associated with the validation token;
• and
• transmit, to the second device, a confirmation indicating that the client device is authenticated.