An apparatus comprising: a near-field communication reader; one or more processors operable to execute stored instructions that, when executed, cause the one or more processors to: authenticate a user via first factor authentication; authenticate the user via second factor authentication different from the first factor authentication, wherein the second factor authentication comprises: a contactless card being tapped to the apparatus such that NFC communication is established, receiving user authentication information from the contactless card via the NFC reader, sending the user authentication information to one or more remote computing devices, and receiving indication from the one or more remote computing devices that the user is authenticated; determine a snapshot including one or more device settings of the apparatus and one or more user behavioral biometrics at a first time of the second factor authentication; cause a stability check on the apparatus to be performed: (i) at a second time after the first time or (ii) when an authentication event occurs after the first time; in response to the apparatus being stable, perform device fingerprinting on the apparatus to determine whether the apparatus is within a predetermined drift threshold from the snapshot; in response to the apparatus being within the predetermined drift threshold, allow the second factor authentication to persist for a predetermined time period; and in response to the apparatus not being within the predetermined drift threshold, reauthenticate the user via the second factor authentication. a near-field communication reader; one or more processors operable to execute stored instructions that, when executed, cause the one or more processors to: authenticate a user via first factor authentication; authenticate the user via second factor authentication different from the first factor authentication, wherein the second factor authentication comprises: a contactless card being tapped to the apparatus such that NFC communication is established, receiving user authentication information from the contactless card via the NFC reader, sending the user authentication information to one or more remote computing devices, and receiving indication from the one or more remote computing devices that the user is authenticated; determine a snapshot including one or more device settings of the apparatus and one or more user behavioral biometrics at a first time of the second factor authentication; cause a stability check on the apparatus to be performed: (i) at a second time after the first time or (ii) when an authentication event occurs after the first time; in response to the apparatus being stable, perform device fingerprinting on the apparatus to determine whether the apparatus is within a predetermined drift threshold from the snapshot; in response to the apparatus being within the predetermined drift threshold, allow the second factor authentication to persist for a predetermined time period; and in response to the apparatus not being within the predetermined drift threshold, reauthenticate the user via the second factor authentication. authenticate a user via first factor authentication; authenticate the user via second factor authentication different from the first factor authentication, wherein the second factor authentication comprises: a contactless card being tapped to the apparatus such that NFC communication is established, receiving user authentication information from the contactless card via the NFC reader, sending the user authentication information to one or more remote computing devices, and receiving indication from the one or more remote computing devices that the user is authenticated; determine a snapshot including one or more device settings of the apparatus and one or more user behavioral biometrics at a first time of the second factor authentication; cause a stability check on the apparatus to be performed: (i) at a second time after the first time or (ii) when an authentication event occurs after the first time; in response to the apparatus being stable, perform device fingerprinting on the apparatus to determine whether the apparatus is within a predetermined drift threshold from the snapshot; in response to the apparatus being within the predetermined drift threshold, allow the second factor authentication to persist for a predetermined time period; and in response to the apparatus not being within the predetermined drift threshold, reauthenticate the user via the second factor authentication.