Abstract: Aspects may relate to a device that comprises a storage, an interface, and a processor. The processor coupled to the interface and operable in a secure mode may be configured to: command the transmission of a nonce through the interface to a server over a channel and receive through the interface a response from the server including an identifier and the nonce over the channel, in which, the response is signed with a private key of the server. Further, the processor operable in the secure mode may be configured to: verify the signature with a public key of the server; verify the nonce; store the identifier in the storage; and display the identifier on a secure display to initiate authentication with the server.