Verify the user not the device
Identity-bound biometrics verify who the actual user is, not just device ownership.
BIO-key MobileAuth: from local biometrics to enterprise-wide security.
Identity-bound biometrics verify who the actual user is, not just device ownership.
Enables passwordless MFA via push notifications and advanced biometrics.
Includes face, fingerprint and palm scanning, all via the user’s own Apple or Android smartphone.
Hashed biometrics data is stored on the cloud, so there’s no risk of compromise if a device is lost or stolen.
Reduce friction and improve user experience with one-tap push-approval notifications for fast logins.
Prevent spoofing by using advanced liveness-detection to intercept and stop fake biometric copies
Centralized policy control and administration via PortalGuard integration
Works with BIO-key PortalGuard and with leading third-party authentication-management platforms.
See how BIO-key MobileAuth transforms your users' smartphones into secure biometric authentication devices
Find a way to prevent unauthorized access to these systems with high levels of security but without slowing down your users.
With BIO-key MobileAuth, users can authenticate themselves quickly and securely, even when they can’t connect to MobileAuth servers.
Finding a means of ID that does not require third-party devices, is easy to use and is secure.
BIO-key MobileAuth enables customers to securely authenticate themselves with their own devices, quickly and easily.
Finding an authentication method that is robust and integrates with the policy-defined zero-trust environment.
BIO-key MobileAuth integrates with a range of zero-trust implementations to work as primary or step-up authentication.
To make password theft impossible or of little or no use to cyber criminals without adding complexity for users.
Criminals cannot easily steal or clone user biometrics but legitimate users can log in quickly and easily with BIO-key MobileAuth.
With over 3,000 password-related IT support calls per month, Monash Health required a scalable, customizable login solution for Outlook Web App and internal systems — without compromising regulatory compliance.
Using BIO-key’s PortalGuard, Monash Health implemented secure 2FA and self-service password reset across devices and apps. The solution reduced help desk calls and improved compliance and user experience.
Read the case studyFind out how BIO-key’s IAM solutions bring secure SSO, MFA, and adaptive authentication together in one platform.
To activate MobileAuth, download the app from the App Store or Google Play. During your first login to a PortalGuard- or WEB-key-enabled system, you’ll be prompted to scan a QR code to link your device. Once paired, you can authenticate using push notifications, biometrics, or device-based passkeys.
Yes. For security reasons, biometric data is stored only on your device and is never transmitted or stored in the cloud. If you lose or replace your phone, you’ll need to re-enroll your biometrics on the new device. PortalGuard provides self-service recovery options or IT-assisted re-enrollment to restore access quickly and securely.
MobileAuth is designed to be flexible. If your device lacks biometric sensors, you can still authenticate using other supported methods such as:
This ensures that users without biometric-capable devices can still access systems securely.
MobileAuth uses identity-bound biometrics and device-based cryptographic keys to ensure that authentication is tied to the individual user and their device. It supports FIDO2/WebAuthn standards, which eliminate shared secrets and are resistant to phishing attacks. Biometric spoofing is mitigated by relying on the device’s secure enclave and native biometric protections (e.g., liveness detection).
Yes. PortalGuard and MobileAuth support adaptive authentication policies, allowing organizations to assign different methods based on user roles, device types, or contextual risk factors. For example, high-risk users may be required to use biometrics and push approval, while others may use OTP or PIN-based methods.
Learn more about the technical specifications, configurations, integrations and other aspects of BIO-key MobileAuth.
Download PDF
Discover more about Bio-key with access to additional product information, industry news and thought leadership content.
Read More
