Techniques disclosed herein provide a geolocation-based two-factor authentication process. An authentication service receives a first authentication factor associated with an account. Upon validating the first authentication factor, the authentication service requests a second authentication factor from an application executing on a mobile device associated with the account. The second authentication factor identifies at least a location of the mobile device. The authentication service determines a location of the client device. Upon determining that the locations of the mobile device and of the client device are within a specified proximity of one another, the authentication service grants access to the account.