CypherEye — CypherEye — Passwordless Authentication Enterprise Mobile App

The challenge

Corporate users often face frustration and security risks associated with traditional password-based authentication, which requires remembering complex passwords with at least eight characters including uppercase letters and special characters. This cumbersome process not only hampers user experience but also increases the likelihood of password-related vulnerabilities such as phishing, password reuse, and brute force attacks. Organisations need a more secure and user-friendly authentication solution to enhance both security and user satisfaction.

What we built

The CypherEye app offers a seamless passwordless authentication experience for corporate users, eliminating the need to remember complex passwords. By simply scanning a cryptographic image with their smartphone, users can securely sign in. CypherEye leverages patented cryptographic technology, pairing user identities with unique private keys and employing a time-sensitive challenge for enhanced security. The dynamic nature of CypherEye, unlike static QR codes, provides superior protection against known methods of compromise. The app requires the installation of a CypherEye server and integrates with any SAML-enabled service, managing identities through Microsoft Active Directory. This approach ensures a better user experience and robust security for organisations.

Outcome

The system went live on schedule and is in active use today. As with every Kirshi Technologies engagement, delivery was sprint-based with measurable milestones at each stage, and CypherEye retained full intellectual property ownership of all custom code from day one.

Technologies

Passwordless Cryptography SAML Active Directory