Updates, analysis & insights

Singpass built its own device-bound passkey manager instead of using iCloud Keychain. What that choice means for banks, relying parties and digital credentials.

Passkey adoption stalls in the moments around the WebAuthn ceremony. Four configurations that decide whether users actually keep using passkeys in 2026.

Silent network authentication verifies a phone number through the carrier, no SMS code. How the SIM-based and network methods work, and where each fits.

HIPAA MFA requirements are changing. The proposed Security Rule would make MFA mandatory for all ePHI access. Here's what it covers and how to prepare now.

Learn how banks can move beyond SMS OTP at onboarding using silent network authentication, liveness checks, passkeys, and adaptive fallbacks.

Push authentication best practices for 2026. Why number matching alone is not enough, and what the architecture around it has to look like to stop MFA fatigue.

Google, Apple, and the EU are all shipping digital credential infrastructure in 2026. Here is what changed and what it means for identity and authentication.

Most passkey deployments get the credential right and the system wrong. Getting them into production without breaking your auth stack is what most teams underestimate.

The UK's NCSC compared passkeys against every form of traditional MFA, attack by attack. Here's what they found, and what it means for teams building authentication today.

Pension funds are using liveness detection to verify beneficiaries are still alive. See how biometric presence verification is reshaping identity checks.

Visa VAMP replaced VFMP and VDMP in 2025. Understand the VAMP ratio, 1.5% merchant threshold, $8/dispute fees, and steps to reduce your CNP dispute exposure.

Authsignal joins the IATA Strategic Partnership Program to advance digital identity and passkey authentication across airlines and global travel. Learn more.

The BSP has set a June 30, 2026 deadline for Philippine banks to replace SMS OTPs under Circular 1213 and AFASA. Here's what the regulation requires and how banks can comply.

From session management to MFA fallbacks, in-house auth is harder than it looks. See why more teams are choosing to buy instead of build.

Bank Negara Malaysia’s updated RMiT raises authentication standards. Learn the new device binding, MFA, and transaction rules, and how to comply.

Authsignal partners with DT Asia Group to bring passwordless authentication across Asia-Pacific. The partnership combines Authsignal's authentication platform with DT Asia's regional distribution network to deliver phishing-resistant, consumer-friendly security at scale.

Account recovery is identity's weakest link. Learn why most companies get it wrong, how attackers exploit recovery flows, and practical steps to build secure, user-friendly account recovery that doesn't compromise your authentication strategy.

Authsignal launches Canadian Region with in-country data centers. Deploy passkeys and modern authentication while meeting PIPEDA compliance requirements.

Learn how to deploy passkeys that users actually adopt. This guide covers FIDO2 implementation strategies, UX best practices, and security controls that drive 60-70% adoption rates, with insights from Yubico and Authsignal's real-world deployments.

Learn how digital credentials and passkeys work together to create secure, privacy-preserving authentication. Discover the key differences and use cases.

Authsignal, Tools for Humanity, and Qualcomm unveiled the world's first palm and crypto retail payment at NRF 2026, enabling secure on-device authentication.

From passkeys and digital IDs to AI agents, these five authentication trends will reshape how we build trust in 2026.

2025 marked a turning point for digital identity. Governments banned SMS OTP, NIST elevated phishing-resistant MFA, and passkeys reached mass adoption. Here's what changed and what organizations must do next.

Credential stuffing attacks are evolving fast, are your defenses keeping up? Discover how adaptive MFA, behavioral biometrics, and passkeys can stop attacks in 2025. Learn what actually works today.

Passage by 1Password is shutting down in January 2026. Learn how to migrate to Authsignal, a future-ready authentication platform with passkeys, adaptive MFA, and no-code orchestration for modern identity security.

Authsignal’s ServiceNow integration brings passkey, push, WhatsApp OTP, and biometric authentication to Contact Center workflows, enabling secure inbound and outbound caller verification directly within the ServiceNow platform.

India and UAE are phasing out SMS OTP by 2026 as regulators push for stronger authentication. Discover why SMS is failing, how fraud is rising, and which secure alternatives, like passkeys, biometrics, and in-app authentication, are replacing it worldwide.

Authsignal recognized by KuppingerCole as a Rising Star in CIAM and passwordless authentication for its API-driven, modular approach that integrates with existing IDPs.

Discover key lessons from issuing and verifying millions of passkeys at Authsignal. Explore adoption trends, real-world enterprise results, and why the passwordless future is arriving faster than expected.

Discover how to build high-trust authentication in the age of AI-powered fraud. Learn why traditional MFA is failing, and how phishing-resistant passkeys and high-assurance biometrics can protect against deepfakes, session hijacking, and evolving cyber threats.

Losing a device with your passkeys isn’t as catastrophic as many fear. Thanks to cloud sync, cross-device authentication, and advanced recovery methods, your access and security remain intact. Learn how Apple, Google, and others handle device loss, and the best practices to keep users safe in a passwordless world.

Discover how modern authentication is transforming call center security and customer experience. Learn about passkeys, biometrics, and phishing-resistant solutions that reduce call times while preventing fraud.

Governments worldwide are banning SMS OTPs due to rising fraud risks. Learn why regulators in the Philippines, UAE, and EU are cracking down, and what secure alternatives banks must adopt to stay compliant and protect customers.

At WWDC 2025, Apple announced powerful passkey updates that streamline account creation, sync credentials, and automate upgrades, making passwordless login easier than ever. Discover the five key features and what they mean for developers, users, and the future of secure authentication.

Discover how Authsignal’s new AI assistant helps you understand complex rule logic in plain English, debug faster with rule backtesting, and fine-tune OTP rate limits—all from your dashboard.

Discover how context-aware MFA balances security and user experience by adapting authentication based on real-time risk signals—protecting high-risk actions without frustrating users.

Discover why modernising customer authentication is crucial for financial services institutions in 2025. Cybersecurity expert Vanessa Leite explores the evolving threat landscape, sector-specific challenges, and how innovative solutions like passkeys and adaptive authentication can enhance both security and user experience.

Celebrate World Passkey Day 2025 by exploring the global shift from passwords to passkeys. Discover how major platforms, governments, and businesses are embracing this faster, safer authentication method—and why passkeys are poised to replace passwords for good.

Discover why leading companies are replacing SMS OTP by 2026. Learn about security risks, global compliance changes, hidden SMS costs, and the best alternatives like passkeys and WhatsApp OTP. Future-proof your authentication with Authsignal.

Discover how to embed passkeys into your app workflows. Learn why Authsignal’s non-IdP approach enables seamless, risk-based authentication without the need for identity system overhauls—saving time and reducing friction.

Looking for a Twilio Verify alternative? Discover how Authsignal provides a complete step-up authentication solution with passkeys, adaptive MFA, and powerful no-code policy tools—all with minimal engineering effort.

Automate your crypto compliance and fraud prevention with Chainalysis KYT and Authsignal. Instantly respond to high-risk blockchain transactions using no-code rules, re-KYC, and step-up authentication. Build a platform where legitimate customers experience minimal friction while suspicious transactions receive appropriate scrutiny.

Learn how to enhance your Keycloak authentication flow by adding passkeys with Authsignal. This step-by-step guide covers setup, passkey enrollment, autofill implementation, and custom Keycloak configurations for a seamless and secure user experience.

Modernize authentication effortlessly with Authsignal. While Cognito covers the basics, Authsignal adds the extra security and flexibility your app needs—seamlessly enhancing authentication without heavy engineering work.

Revolutionize retail with Authsignal's palm biometric payments and Identity platform. Showcased at NRF, Authsignal’s palm biometric IDX solution enables secure, contactless payments and identity verification. Powered by Qualcomm, it ensures blazing-fast, accurate, and secure user experiences.

Authsignal helps organizations comply with the CISA Mobile Communications Best Practice Guidance by offering drop-in phishing-resistant passkeys, strong MFA fallback methods, and WhatsApp OTP as an encrypted and reliable alternative to SMS

Authsignal has launched a world-first solution that binds a mobile driver's license (mDL) with Palm Biometrics.

Learn about biometric passkey-binding pairs facial recognition with cryptographic passkeys for secure, seamless authentication, protecting against phishing, deepfakes, and fraud while improving user experience.

Passkeys simplify authentication and resist phishing, but can they truly replace passwords and MFA? Explores passkey fallback opinions, key challenges, and best practices, highlighting why passkeys are the future of authentication.

Not all passkeys are the same. Synced multi-device passkeys and device-bound passkeys offer distinct benefits and trade-offs in security, access, and user experience. This guide covers the differences and key considerations for passkey recovery.

The short answer is no. Face ID and passkeys are not the same, though they can complement each other in a seamless authentication experience. Here’s a breakdown:

Explore myGov's passkey implementation, enhancing Australia's government digital security amid rising cybercrime. Learn about best practices for implementing passkeys.

High SMS costs in Asia-Pacific and the prevalence of WhatsApp are driving enterprises to adopt WhatsApp OTPs for user verification, offering a cost-effective and reliable solution.

Explore how Revolut enhances security and user experience with passkeys, leading the way in online banking innovation and fintech security.

Learn how FSC Standard No. 29 enhances fraud prevention for Australian superannuation funds with MFA. Discover how Authsignal helps ensure compliance and secure customer assets.

This blog explores Mastercard's innovative approach to passkeys and its implications for the future of payment security.

Our initial analysis addressed the new NIST supplement for passkeys, breaking down the changes and clarifying positions regarding synced/syncable passkeys. In part 2, we focus on implementation considerations.

NIST’s April 2024 supplement provides guidance on syncable passkeys and their role in achieving AAL standards. Discover key updates for secure authentication.

Learn call center authentication best practices, including passive methods like FIDO2 passkeys and biometrics, to enhance security and prevent fraud.

A rapid-response playbook tailored specifically for the aftermath of Account Takeovers (ATOs) and Credential Stuffing incidents.

Loyalty programs drive relations and growth, but cyber threats surge with the value of accounts. Multi-factor authentication is now essential for security.

Explore how passkeys integrated with PSD2 SCA enhance transaction security. Authsignal’s platform streamlines compliance and user experience.

We explore some of the vectors that will become more prolific and some mitigating controls.

Discover the critical updates to the Essential Eight Maturity Model, including the rise of phishing-resistant MFA. Authsignal guides you through the new compliance requirements.

This article aims to give talking points of identity or security professionals, and a framework to champion the adoption of passkeys within their organization.

Understand MFA control requirements for ISO 27001, PCI DSS, and SOC 2. Learn how Authsignal helps you meet compliance with seamless multi-factor authentication.

Passkeys APIs and SDKs - A guide to easily implement Passkeys. Educating customers on the benefits of passkeys is crucial in building adoption.

Zero trust is a security model that assumes that no user or device can be trusted, even if they are inside the network perimeter.

Learn how to add passkeys to AWS Cognito and Amplify in iOS and Android applications using React Native with our easy-to-follow guide.

Explore cost-effective Auth0 alternatives that don’t require migration. Plug in Authsignal to gain flexibility and enhance your customer authentication journey.

Authsignal is proud to release our latest feature: Mobile Native SDKs for Passkeys. This includes platform support for iOS, Android and cross-platform support..

Passkeys are unique combinations of characters, such as passwords or cryptographic keys, used to authenticate and authorize users. They enable the removal of...

Push authentication, a mobile-centric method, keeps the user journey within the app by sending notifications to the device, relying on trusted device possession for security.

Authsignal ecosystem expands with iProov global partnership to bring biometrics to Authsignal's suit of tools.

The best fraud prevention and mitigation software tools should offer real-time feedback.

Authsignal integrates with Microsoft Azure AD B2C, enabling tenants to quickly set up complex MFA and passwordless user journeys in hours using Open ID Connect.

SMS-based authentication is no longer secure enough to protect accounts. Learn why and explore safer alternatives like passkeys and security keys.

Explore the best passwordless authentication tools. This guide covers top solutions like Authsignal and tips on implementing secure flows.

Discover how adaptive MFA and passwordless authentication work, and how Authsignal helps you protect users without friction. Learn the key differences and find the right fit for your stack.

Authsignal a world leader in Identity Orchestration and Passwordless Authentication is excited to annouce a new technology partnership with Deduce.

Auththsignal's Passwordless Authentication and Fraud Rules engine is live in Europe and Australian regions.

At Authsignal, we created a no-code fraud rules engine to enable FraudOps teams to design their own rules, deploy and...

Excited to announce our strategic partnership with Sekura Mobile Intelligence, empowering Authsignal with their global mobile intelligence footprint.

Authsignal is excited to announce our integration and support for Yobico Yubikeys. Authsignal's listing in the self-certified Yubikey marketplace

Account Takeovers, Sim Swapping, Automation, Crypto Attacks and Synthetic Identities are now the top choices for modern cybercriminals.

fintech sector has grown at exponential rates, fraud costs are hitting new records. UK’s Justice Committee announced that consumers were scammed

Scammers deceive your carrier to activate their SIM, seizing control of your number.

Passwordless authentication is a modern way to authenticate a user’s identity without the user needing to remember a password. Authsignal enables

Adaptable Multifactor Authentication Made Easy. Here's 4 places you should secure with MFA today.

A guide to minimising customer impact when deploying Multifactor Authentication. Adaptive Multifactor Passwordless Authentication by Authsignal.com

Learn how to migrate from Azure AD B2C to Microsoft Entra External ID with this practical guide. Covers tenant setup, user migration strategies (bulk import vs. JIT migration), application code updates, and how to enhance authentication during and after migration.

Authsignal makes meeting stringent cybersecurity requirements simple for government agencies. Trusted by leading organizations like Air New Zealand and Trade Me.

Rather than focusing on complexity, the new guidelines emphasize usability, password length, and Password Blocklists, aiming to balance improved security and user-friendly practices.