Products & Releases

Authentify Announces 'Alternative to Password' App That Turns A Mobile Device Into A Secure Personal Authenticator

Authentify xFA replaces passwords with a mobile xFA app that scans an on-screen, short-lived cryptograph
CHICAGO, July 9, 2013 – Experts agree passwords are at the root of online security problems because when typed into browsers, sent over open networks and centrally stored, they are easily compromised leaving the networks and accounts they "protect" vulnerable to criminals. But that can all change with a digital image that can save your online identity.

Today Authentify, a leading global innovator in phone-based out-of-band authentication services, introduced an alternative to overworked passwords, an online security app that turns mobile devices into secure personal authenticators. Combining enterprise control with user convenience, the Authentify xFA&trade Service replaces passwords with a mobile xFA app that scans an on-screen, short-lived cryptograph--a digital image that, when scanned, activates a PKI digital certificate for strong authentication--and turns a smartphone into a powerful authenticator that delivers server-to-server class endpoint security with no effort from the end user or the enterprise. xFA, which stands for "x" factors of authentication, also provides strong multi-factor authentication supporting voice biometrics and other forms of secure messages allowing enterprises or their users to choose the level of authentication the transaction warrants.

Authentify xFA can be used by any online service provider or enterprise that needs strong protection at time of logon but also needs a simple user experience. xFA provides greater protection to financial services, e-commerce, medical insurance firms or any enterprise/SMB private networks from password exploits or breaches without losing productivity or inconveniencing users.

"Authentify xFA effectively eliminates the risks of password cyber-breaches and the costly customer breach notifications and incident response measures that follow, but the xFA service handles all the security complexity," said Craig Shumard, the former CISO of Cigna Health Insurance and principal of Shumard Associates. "xFA should be viewed as simple and easy to use as SSL or HTTPS."

The xFA Service and the xFA app--downloadable from Apple and Android stores--are available immediately worldwide. Authentify offers the service to customers for fixed annual subscription fees.

According to the Verizon 2013 Data Breach Investigations Report, 78% of cyber-attacks were low or very low in difficulty, and the vast majority involve stolen passwords.

"Password security is broken and the headlines prove it," said Peter Tapling, Authentify president & CEO. "We developed xFA because the security is in a different class, anchored by digital certificates and biometric authentication. Until now, however, cost, user complexity and ease of deployment have been formidable barriers preventing the widespread use of these technologies. Authentify is changing that paradigm because xFA is even easier to use than passwords yet delivers the proven security of digital certificates and voice biometrics over a second channel. And since the users' own mobile device becomes the authenticator, it's easy to scale."

Authentify's xFA defeats a broad range of exploits designed to steal passwords or hijack online sessions such as man-in-the-middle, man-in-the-browser, viruses, Trojans and keyloggers, and does so with a more engaging user experience than other technologies that layer on top of one another.

For more information on xFA, visit Authentify at or call 773.243.0300.

About Authentify, Inc.

Authentify, Inc. is the leading innovator of global phone-based, out-of-band authentication services and was recently ranked as a visionary by Gartner. These services enable organizations that need strong security to quickly and cost-effectively add 2-factor or 3-factor authentication layers to user logon, transaction verification or critical changes such as adding a payee to an e-pay or wire account. The company's patented technology employs a service-oriented message architecture and XML API to seamlessly integrate into existing security processes. Authentify markets primarily to financial services firms that need to protect their clients' online accounts, corporate security professionals managing corporate access control and e-merchants who want to limit fraud on their sites.