Passkey instead of reusable secret
Passkeys protect login; Pseudonymous device binding and app integrity credentials add context to a critical action.
Pseudonymous device binding
A correct password says little about whether a legitimate app is operating on a known device. VeriSeal therefore evaluates authentication and device separately.
- No hardware serial number in user profile
- Revoking lost or no longer trusted devices
- Higher device level only with reliable proof of integrity
Mobile integrity as additional proof
VeriSeal verbindet die physische Kennzeichnung mit einer serverseitig kontrollierten Produktidentität. Welche Sicherheitsstufe sinnvoll ist, wird anhand von Risiko, Prozess, Zielgruppe und regulatorischem Umfeld festgelegt.