FIDO2 passkeys for banking 
alongside the tokens you already run

Phishing-resistant passkeys | Avoid disruption | One platform 

Consumer-grade passkey convenience that supports compliance without stranding existing users.

Get DigipassONE™ Demo

Talk to an enterprise cybersecurity specialist today.

OneSpan is trusted by the organizations securing the world's most critical digital interactions

  • NASA company logo
  • RBC Royal Bank company logo
  • IBM company logo
  • Odeabank company logo
  • Raiffeisen company logo
  • Standard Chartered company logo
  • BMO company logo

Benefits

The right passkey for the risk level

Support both synced passkeys for convenience-led journeys and device-bound FIDO2 credentials where regulators or risk teams require them. Choose the right passkey for each user journey.

Passwordless without the fragmentation

Manage passkeys, hardware authenticators, and mobile app authentication from one central console with unified policies and reporting.

SCA-compliant from day one

Passkey login that satisfies PSD2 SCA paired with transaction signing for payment approval, supporting compliance.

✓

Active FIDO Alliance contributor.
Digipass FX hardware keys, OTP devices, and passkeys from one vendor and one platform.
DigipassONE Authenticate

"Authentication modernization is not a rip-and-replace exercise. Financial institutions in particular will run hardware tokens, mobile authenticators, and passkeys side by side for years, and the real differentiator is no longer any single method but the ability to manage that coexistence without abandoning existing investments."

- Guillaume Teixeron, Senior Analyst, KuppingerCole

Inside DigipassONE Authenticate

 

Feature

Core capability

Enterprise business value

Passkeys & FIDO2

Support both synced & device-bound passkeys.

Eliminates password reset costs while meeting strict risk-level policies.

Hardware authenticators

Digipass FX hardware keys & legacy OTP tokens.

Guarantees coverage for non-smartphone or high-risk institutional users.

Mobile & transaction signing

Push approvals & visual transaction signing.

Defends against Adversary-in-the-Middle (AitM) and payment tampering attacks.

Adaptive risk-based MFA

Dynamic authentication based on user/device risk context.

Reduces friction for routine logins; triggers stepped-up authentication only when needed.

SCA compliance

Out-of-the-box support for PSD2 & DORA frameworks.

Shortens audit cycles and helps prevents regulatory non-compliance penalties.

Why DigipassONE| OneSpan

Why OneSpan

Strengthen authentication without disrupting customers

See how DigipassONE fits your current authentication estate, and what a phased path to phishing-resistant MFA looks like for your institution.​

Talk to an expert     Watch the 11-minute overview

Support today's requirements. Prepare for what's next.

The DigipassONE platform

Introducing DigipassONE, OneSpan's unified platform for authentication, transaction security, digital credentials, application protection, and analytics.

DigipassONE FAQs

What is DigipassONE?

DigipassONE is OneSpan's unified authentication platform, designed to help organizations modernize authentication without disruption while simplifying management, strengthening trust, and supporting future authentication initiatives.​

It brings together authentication, transaction security, digital credentials, and analytics in a shared platform architecture. By supporting a broad range of authentication methods and deployment models, DigipassONE helps organizations address evolving security requirements, user expectations, and regulatory demands while preserving existing investments.

How does DigipassONE help organizations modernize authentication?

Authentication modernization is not a single technology transition. Organizations must balance existing authentication environments with evolving standards, rising user expectations, and emerging authentication technologies.​

DigipassONE provides a practical path to passkeys, digital credentials, and future authentication models while preserving current authentication investments. Its modular platform architecture enables organizations to adopt new capabilities according to business priorities and timelines, helping reduce modernization risk while maintaining user coverage and operational continuity.

Can DigipassONE work with existing authentication methods?

Yes. DigipassONE is designed to help organizations evolve authentication without replacing existing authentication systems.​

Supporting the industry's broadest authentication portfolio, DigipassONE enables established and emerging authentication methods to coexist. Organizations can introduce capabilities such as passkeys and digital credentials while continuing to support hardware tokens, mobile authenticators, SMS OTP, biometrics, and other authentication methods already in use.​

This approach helps organizations reduce migration risk and support modernization at a pace that aligns with business, security, and regulatory requirements.

Which capabilities are part of the platform?

DigipassONE consists of four core pillars that help organizations secure the full authentication lifecycle:​

DigipassONE Authenticate​
Delivers phishing-resistant authentication through passkeys, passwordless experiences, MFA, adaptive authentication, and strong customer authentication (SCA).​

DigipassONE Verify​
Provides a digital identity wallet connector that enables organizations to adopt and verify digital credentials through a single integration layer.​

DigipassONE Insights​
Delivers analytics and reporting that help organizations optimize authentication performance, monitor trends, and improve user experiences.​

DigipassONE Protect​
Provides next-generation application and mobile protection capabilities to help organizations safeguard critical digital interactions.