HYPR Authenticate

What it does

HYPR Authenticate is a passwordless multi-factor authentication (MFA) product that replaces workforce passwords with phishing-resistant FIDO2 passkeys. It covers the full login chain, from workstation sign-in on Windows, macOS, Linux, and virtual desktop environments through cloud applications, without falling back to passwords or push notifications. Its distinguishing mechanism is hardware-backed credential storage: private keys are generated and held in secure hardware on the user's devices or external security keys, so credentials cannot be phished, replayed, or reused across origins.

How it works

Users enroll a smartphone through the HYPR mobile app or register platform authenticators and FIDO2 security keys; authentication then runs on public key cryptography, with private keys kept in device hardware. A Desktop MFA client handles workstation login across Windows, macOS, Linux, and virtual desktops, while the Control Center console centralizes policy, enrollment, and integration management. The platform plugs into existing identity providers, extends passwordless login to VPN and remote access, and supports both synced and device-bound passkeys, including non-syncable enterprise passkeys for Microsoft Entra ID. A Passwordless SDK embeds the same authentication flows in custom web and mobile apps.

Credentials and traction

HYPR holds SOC 2 Type II, ISO 27001, ISO 27017, and ISO 27018 certifications, alongside FIDO Alliance certifications for FIDO2, FIDO UAF, FIDO U2F, and FIDO Server. Customers include Mastercard, Aetna CVS Health, Navy Federal Credit Union, and Otis Elevator, reflecting a concentration in banking, financial services, and other large regulated workforces. Third-party risk assessments through TruSight and CyberGRX, plus completed Cloud Security Alliance CAIQ documentation, support enterprise procurement reviews.