# Device Fingerprints

Device fingerprints are possession-based SCA challenge factors. They allow you to verify that a user is accessing the API from a recognized device.

A profile can have up to 3 device fingerprints registered simultaneously. All device fingerprint operations use JOSE (JWE) encryption. See the [SCA over API guide](/guides/developer/auth-and-security/sca-and-2fa) for encryption details.