Products
WWPass MFA
Username- and passwordless authentication for enterprise applications, with phishing-resistant security built in.
Products
WWPass MFA
Username- and passwordless authentication for enterprise applications, with phishing-resistant security built in.
Products
WWPass MFA
Username- and passwordless authentication for enterprise applications, with phishing-resistant security built in.
Passwords force a choice. One convenient password, or hundreds you can't remember. WWPass replaces both usernames and passwords with a single cryptographic WWPass Key. On the backend, user’s key and the service provider's key work together to locate the data that grants access. Zero-trust distributed architecture.
Passwords force a choice. One convenient password, or hundreds you can't remember. WWPass replaces both usernames and passwords with a single cryptographic WWPass Key. On the backend, user’s key and the service provider's key work together to locate the data that grants access. Zero-trust distributed architecture.
Passwords force a choice. One convenient password, or hundreds you can't remember. WWPass replaces both usernames and passwords with a single cryptographic WWPass Key. On the backend, user’s key and the service provider's key work together to locate the data that grants access. Zero-trust distributed architecture.
WWPass authentication verifies identity through cryptographic keys instead of a username and password.
The user holds a unique key. The service provider holds a unique key. WWPass uses both keys together to open an encrypted data container and pass its content to the service provider. No username is entered. No password is transmitted.
WWPass authentication verifies identity through cryptographic keys instead of a username and password.
The user holds a unique key. The service provider holds a unique key. WWPass uses both keys together to open an encrypted data container and pass its content to the service provider. No username is entered. No password is transmitted.
WWPass authentication verifies identity through cryptographic keys instead of a username and password.
The user holds a unique key. The service provider holds a unique key. WWPass uses both keys together to open an encrypted data container and pass its content to the service provider. No username is entered. No password is transmitted.
Username-less, not just passwordless
Most authentication solutions replace the password with something else. An OTP. A push notification. A biometric. Passkeys. The username stays. The identity layer stays. The attack surface stays. WWPass removes the username too.
Each user gets a unique key. Each service provider gets a unique key. Together, those keys open a data container built for that user and that service, and only that pairing. A user's data at one service provider is fully isolated from their data at any other, and reaches another service provider only with the user's explicit permission.
No shared username. No shared password. No single identifier across services.
Username-less, not just passwordless
Most authentication solutions replace the password with something else. An OTP. A push notification. A biometric. Passkeys. The username stays. The identity layer stays. The attack surface stays. WWPass removes the username too.
Each user gets a unique key. Each service provider gets a unique key. Together, those keys open a data container built for that user and that service, and only that pairing. A user's data at one service provider is fully isolated from their data at any other, and reaches another service provider only with the user's explicit permission.
No shared username. No shared password. No single identifier across services.
Username-less, not just passwordless
Most authentication solutions replace the password with something else. An OTP. A push notification. A biometric. Passkeys. The username stays. The identity layer stays. The attack surface stays. WWPass removes the username too.
Each user gets a unique key. Each service provider gets a unique key. Together, those keys open a data container built for that user and that service, and only that pairing. A user's data at one service provider is fully isolated from their data at any other, and reaches another service provider only with the user's explicit permission.
No shared username. No shared password. No single identifier across services.
How it works
For users, secure access is as simple as scanning a QR code with the WWPass Key App. Behind the scenes, WWPass performs complex cryptographic authentication.
User experience
Technical overview
1. User scans QR
Using the WWPass Key App, the user scans the QR code shown on your service's login screen.
2. Authentication
WWPass authenticates the key and provider, then locates the matching data container.
3. Access granted
The service provider verifies the user and grants access, with identity hidden from attackers.
How it works
For users, secure access is as simple as scanning a QR code with the WWPass Key App. Behind the scenes, WWPass performs complex cryptographic authentication.
User experience
Technical overview
1. User scans QR
Using the WWPass Key App, the user scans the QR code shown on your service's login screen.
2. Authentication
WWPass authenticates the key and provider, then locates the matching data container.
3. Access granted
The service provider verifies the user and grants access, with identity hidden from attackers.
How it works
For users, secure access is as simple as scanning a QR code with the WWPass Key App. Behind the scenes, WWPass performs complex cryptographic authentication.
User experience
Technical overview
1. User scans QR
Using the WWPass Key App, the user scans the QR code shown on your service's login screen.
2. Authentication
WWPass authenticates the key and provider, then locates the matching data container.
3. Access granted
The service provider verifies the user and grants access, with identity hidden from attackers.
What the solution delivers
One key, every service
One WWPass Key authenticates across every WWPass-enabled service. Each service still gets its own isolated data container.
No username, no password
Authentication runs on cryptographic keys, not a username and password. No username field. No password field.
Self-service key management
A separate Service Key lets users revoke a lost key, issue a new one, or reset a PIN.
Phishing-resistant by design
Each login uses a one-time ticket, confirmed on the user's own device.
Device-agnostic
The WWPass Key is available as a smartcard, dual interface USB/NFC token, or as a mobile app for iOS and Android.
AAL3 assurance level
A hardware key plus PIN or biometric reaches NIST SP 800-63B Authentication Assurance Level 3, the highest level defined.
What the solution delivers
One key, every service
One WWPass Key authenticates across every WWPass-enabled service. Each service still gets its own isolated data container.
No username, no password
Authentication runs on cryptographic keys, not a username and password. No username field. No password field.
Self-service key management
A separate Service Key lets users revoke a lost key, issue a new one, or reset a PIN.
Phishing-resistant by design
Each login uses a one-time ticket, confirmed on the user's own device.
Device-agnostic
The WWPass Key is available as a smartcard, dual interface USB/NFC token, or as a mobile app for iOS and Android.
AAL3 assurance level
A hardware key plus PIN or biometric reaches NIST SP 800-63B Authentication Assurance Level 3, the highest level defined.
What the solution delivers
One key, every service
One WWPass Key authenticates across every WWPass-enabled service. Each service still gets its own isolated data container.
No username, no password
Authentication runs on cryptographic keys, not a username and password. No username field. No password field.
Self-service key management
A separate Service Key lets users revoke a lost key, issue a new one, or reset a PIN.
Phishing-resistant by design
Each login uses a one-time ticket, confirmed on the user's own device.
Device-agnostic
The WWPass Key is available as a smartcard, dual interface USB/NFC token, or as a mobile app for iOS and Android.
AAL3 assurance level
A hardware key plus PIN or biometric reaches NIST SP 800-63B Authentication Assurance Level 3, the highest level defined.
Integrations
WWPass works alongside your existing identity infrastructure, integrating with Microsoft Entra ID, Okta, Auth0, Salesforce, AWS, IBM Security Access Manager, Cisco, and Fortinet through standard IAM and SSO protocols. No rip and replace required. Support includes encrypted cloud storage, PKI email and Winlogon, disk encryption, VPN, and remote desktop logins.
Identity & Security Platforms
Microsoft environments
WWPass supports the OIDC protocol required for an External Authentication Method with Entra ID. The existing directory and user objects stay in place.
Protocols
SAML, OAuth2 / OIDC, LDAP, RADIUS, and Kerberos
Integrations
WWPass works alongside your existing identity infrastructure, integrating with Microsoft Entra ID, Okta, Auth0, Salesforce, AWS, IBM Security Access Manager, Cisco, and Fortinet through standard IAM and SSO protocols. No rip and replace required. Support includes encrypted cloud storage, PKI email and Winlogon, disk encryption, VPN, and remote desktop logins.
Identity & Security Platforms
Microsoft environments
WWPass supports the OIDC protocol required for an External Authentication Method with Entra ID. The existing directory and user objects stay in place.
Protocols
SAML, OAuth2 / OIDC, LDAP, RADIUS, and Kerberos
Integrations
WWPass works alongside your existing identity infrastructure, integrating with Microsoft Entra ID, Okta, Auth0, Salesforce, AWS, IBM Security Access Manager, Cisco, and Fortinet through standard IAM and SSO protocols. No rip and replace required. Support includes encrypted cloud storage, PKI email and Winlogon, disk encryption, VPN, and remote desktop logins.
Identity & Security Platforms
Microsoft environments
WWPass supports the OIDC protocol required for an External Authentication Method with Entra ID. The existing directory and user objects stay in place.
Protocols
SAML, OAuth2 / OIDC, LDAP, RADIUS, and Kerberos
Built for regulated industries
GDPR
Users are anonymous to the WWPass network, with data isolated per service provider
GDPR
Users are anonymous to the WWPass network, with data isolated per service provider
HIPAA
Username-less access to health systems, with client-side encryption support
DORA
Architecture aligned with ICT risk management principles, including no single point of failure
DORA
Architecture aligned with ICT risk management principles, including no single point of failure
NIS2
Architecture aligned with access control expectations through zero-trust design and AAL3
NIS2
Architecture aligned with access control expectations through zero-trust design and AAL3
PCI DSS
Removes password based authentication risk categories
NIST 800-63
AAL3 achieved with hardware keys
Common questions
Learn more about WWPass and contact us to discuss your use case and get a demo.
What is a username-less, passwordless authentication solution?
How is WWPass different from MFA?
Does WWPass replace our existing IAM infrastructure?
What happens if a user loses their WWPass Key or forgets their PIN?
What devices does WWPass support?
Common questions
Learn more about WWPass and contact us to discuss your use case and get a demo.
What is a username-less, passwordless authentication solution?
How is WWPass different from MFA?
Does WWPass replace our existing IAM infrastructure?
What happens if a user loses their WWPass Key or forgets their PIN?
What devices does WWPass support?
Common questions
Learn more about WWPass and contact us to discuss your use case and get a demo.
What is a username-less, passwordless authentication solution?
How is WWPass different from MFA?
Does WWPass replace our existing IAM infrastructure?
What happens if a user loses their WWPass Key or forgets their PIN?
What devices does WWPass support?
Get WWPass
Download the WWPass Key app and test authentication without a username or password.
Get WWPass
Download the WWPass Key app and test authentication without a username or password.
