Device-based authentication confirms a customer’s identity by verifying possession of a trusted device, such as a cell phone or hardware token, during login or transaction approval.