26 May 2021

1Kosmos, the only standards-certified platform that uses advanced biometrics and a private blockchain to create an indisputable, reusable digital identity for strong and continuous authentication, has announced the availability of its Passwordless Identity Package (PIP). The 1Kosmos PIP provides enterprises a risk-free and scalable passwordless authentication solution.

Research has shown that up to 81% of data breaches are caused by identity and credential compromises, which have pushed many organisations to look to multi-factor authentication and passwordless solutions. However, there are significant vulnerabilities with current systems and many businesses will begin moving to identity-first solutions in the year ahead, according to Gartner.

Countering rise in data breaches and cyber attacks

The recent SolarWinds, Microsoft Exchange and Colonial Pipeline attacks have all begun with credential compromises. Similar breaches can be avoided in the future by adding standards-based identity proofing and authentication measures to current cyber security solutions. 

Enterprises recognise that password-based attacks are their biggest vulnerability, and they are under pressure to implement an effective passwordless solution across multiple departments. PIP offers the flexibility organisations need to roll out passwordless fast, but in a controlled way to meet varying levels of authentication needs,” said Hemen Vimadalal, Founder and CEO of 1Kosmos.

Implementing Passwordless Identity Package (PIP)

The quick implementation of the PIP has businesses up and running fast in seven days or less"

He adds, “The quick implementation of the PIP has businesses up and running fast in seven days or less, to get companies started on their journey to passwordless authentication. Users like the frictionless experience and security teams have all the flexibility they need to ease into their implementation, at whatever pace is right for them.

Security teams often grapple with balancing security with convenience for employees, all while addressing specific authentication needs that vary by department. Senior executives, finance and accounting executives, and those responsible for physical and IT security generally, have higher security requirements than for production line workers.

BlockID digital identity platform

With the PIP, powered by 1Kosmos BlockID, a distributed digital identity platform, organisations can address various passwordless authentication needs across multiple departments, in a matter of days. BlockID enhances the employee experience by offering flexible authentication and identity proofing levels in a simple and easy-to-use registration, and login process.

As the industry’s first NIST 800-63-3 and FIDO2 certified digital identity solution, BlockID provides strong, verified identity-based authentication where needed and reduces the friction associated with filling out forms or remembering user names and passwords. BlockID combines strong authentication, indisputable identity proofing and advanced biometrics.

Key features of the Passwordless Identity Package (PIP) include:

  • Organic Adoption - A passwordless QR code is placed on the same login page as the conventional username and password to give users a choice of when to go passwordless.
  • Reset Assurance - 1Kosmos includes a biometric reset feature, so forgotten passwords are no longer an issue. The user can reset using live biometrics, device biometrics, push or via one-time password (OTP), rather than remembering various passwords for seldom-used services.
  • Licence Flexibility - As users see the value in going passwordless and the adoption increases, the PIP remains flexible. 1Kosmos has packaged the solution so enterprises can buy all the planning, integration and user licences for the first year.

1Kosmos Passwordless Identity Package (PIP) reduces the implementation time and cost of passwordless adoption for organisations. The cloud-based deployment takes under one week and users can have the option to choose two target systems to try passwordless, like Windows, SSO or any other system of their choice.