How HYPR Passwordless Authentication Works

How HYPR Authenticate Phishing-Resistant MFA Works

HYPR Authenticate transforms your smartphone into a FIDO2 passkey, replacing passwords and shared secrets with secure public key cryptography. With HYPR, drastically reduce your attack surface while making login faster and simpler for your employees and customers.

How the Login Process Works

1. The user initiates login to their desktop, SSO provider or connected app and HYPR challenges the user to login with their registered device.
2. HYPR requests the identification factors set up with their registered device and the user provides their chosen verification factor, such as a TouchID. HYPR also supports hardware options such as YubiKeys.
3. This unlocks the private passkey, which is used to sign the challenge. It’s matched against the corresponding public key.
4. The user is logged into their desktop, corporate single sign-on services, and all downstream apps.

What You Experience

This all happens in a single, fast authentication flow. For example, on an iPhone with FaceID, you tap the HYPR Authenticate app, look at your phone, and you’re in.

If you already signed into your desktop using HYPR, then the verified identity is automatically passed to the SSO, no additional verification steps unless step-up authentication is required.

Passkey-Based Authentication Plus Much More

Passkeys are the means but not the end. HYPR's passwordless solution provides a full Identity Assurance ecosystem to securely and seamlessly accelerate business for the modern enterprise.