Passwordless Authentication

Passwordless authentication encompasses every authentication method that doesn’t rely on a (static) password or knowledge-based secret.  Proof of a user’s identity therefore relies on other authentication factors such as a possession factor (e.g., a mobile authenticator app, hardware token or OTP) or a biometric trait such as a fingerprint or facial scan. 

Deploy stronger and more convenient authentication with FIDO, using biometrics such as fingerprint and facial recognition. Deploying OneSpan's FIDO solutions will provide stronger authentication by eliminating server-side vulnerabilities. 

FIDO authentication eliminates the weakest link in the authentication chain: traditional passwords. Combine strong security with an outstanding customer experience by deploying passwordless authentication that uses the native security capabilities present on the user’s mobile device (e.g., smartphone). 

FIDO uses public key cryptography to provide the most secure method of passwordless authentication. Private keys and biometric templates never leave the user’s device and are never stored on a server, meaning they’re also not vulnerable to phishing, password theft or replay attacks. This makes FIDO the perfect solution to combat social engineering attacks. In addition, OneSpan’s FIDO solution is integrated with the OneSpan Mobile Security Suite and provides the benefit of additional application security and app shielding. 

OneSpan’s Cronto solutions help prevent fraud and strengthen protection against Trojans, phishing, person-in-the-middle and person-in-the-browser attacks. Cronto solutions offer a passwordless authentication method as no manual input is required to confirm banking transactions. Cronto takes the trust decision out of the user’s hands, ensuring that only the bank can initiate a transaction signature request. 

Transaction details are displayed for approval by the user. It’s as simple as that. When a user initiates a banking transaction, the details of that transaction are encrypted and presented in a fully encrypted QR-like code. The user simply scans that code and authorizes the transaction.

To strengthen security, many organizations adopt a zero-trust security approach where users must authenticate themselves at each login. Rigid authentication systems result in unnecessary security steps for low-risk transactions and lead to a poor user experience. 

The reality is that security can be completely invisible to the end user and have zero impact on low-risk transactions. OneSpan’s Intelligent Adaptive Authentication applies a precise level of security for each unique customer interaction, resulting in the best possible user experience. This dynamic security is achieved through real-time fraud analysis of extensive user, device, and transaction data, resulting in a risk score. This score triggers automated security workflows that apply the exact security required for each transaction.