AuthShield: A Risk-Aware Two-Factor Authentication System with TOTP and Adaptive Security Analytics.

This is the authors' abstract. We don't add key points for this paper.

Password-only authentication remains highly vulnerable to credential theft and breaches. To address this, this project presents AuthShield, a robust Two-Factor Authentication (2FA) system. Developed using a React front-end, Spring Boot back-end, and MySQL, AuthShield combines secure password hashing with Time-based One-Time Passwords (TOTP) via QR-code pairing. The system features backup recovery codes, trusted device management, and a rule-based risk engine that analyzes login metadata—such as IP addresses, device fingerprints, and failed attempts—to dynamically assess threat levels. A security dashboard summarizes recent activities, providing a practical framework bridging cybersecurity and data-driven principles.