A method comprising: Receiving, by a computer system of an access management system, from a first device, a request by a user for access to a resource; based on the request, determining, by the computer system, that the first device is registered for the user based on an authentication of the user by the access management system using the first device prior to the request; and upon determining that the first device is registered: generating, by the computer system, security data for determining authentication of the user to access the resource using the first device, wherein the security data includes first data, and wherein the first data is encrypted based on an encryption key; sending, by the computer system, the encryption key to a second device that the user has registered with the access management system, wherein the second device is different from the first device; sending, by the computer system, the security data to the first device, wherein the first device presents the security data at an interface of the first device; receiving, by the computer system, from the second device, second data that is generated by the second device based on decryption of the first data included in the security data, wherein the decryption of the first data is performed by the second device using the encryption key sent to the second device, and wherein the security data is obtained by the second device from a presentation of the security data at the first device; determining whether the second data includes the information that is included in the first data; and based on determining that the second data includes the information, enabling the first device to access the resource. Receiving, by a computer system of an access management system, from a first device, a request by a user for access to a resource; based on the request, determining, by the computer system, that the first device is registered for the user based on an authentication of the user by the access management system using the first device prior to the request; and upon determining that the first device is registered: generating, by the computer system, security data for determining authentication of the user to access the resource using the first device, wherein the security data includes first data, and wherein the first data is encrypted based on an encryption key; sending, by the computer system, the encryption key to a second device that the user has registered with the access management system, wherein the second device is different from the first device; sending, by the computer system, the security data to the first device, wherein the first device presents the security data at an interface of the first device; receiving, by the computer system, from the second device, second data that is generated by the second device based on decryption of the first data included in the security data, wherein the decryption of the first data is performed by the second device using the encryption key sent to the second device, and wherein the security data is obtained by the second device from a presentation of the security data at the first device; determining whether the second data includes the information that is included in the first data; and generating, by the computer system, security data for determining authentication of the user to access the resource using the first device, wherein the security data includes first data, and wherein the first data is encrypted based on an encryption key; sending, by the computer system, the encryption key to a second device that the user has registered with the access management system, wherein the second device is different from the first device; sending, by the computer system, the security data to the first device, wherein the first device presents the security data at an interface of the first device; receiving, by the computer system, from the second device, second data that is generated by the second device based on decryption of the first data included in the security data, wherein the decryption of the first data is performed by the second device using the encryption key sent to the second device, and wherein the security data is obtained by the second device from a presentation of the security data at the first device; determining whether the second data includes the information that is included in the first data; and based on determining that the second data includes the information, enabling the first device to access the resource.