0pass is an authentication platform that enables passwordless login across all systems using hardware-backed security keys and smart cards, ensuring compliance with standards like FIDO2 and PIV. It mitigates the risk of credential theft by providing a unified solution for managing user access to workstations, applications, and servers without relying on traditional passwords.
Funding
$3.7M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
BUVFounders
Product
Problem
Traditional password-based authentication methods are vulnerable to phishing, credential theft, and other security breaches, making them inadequate for high-security environments. Managing user access across diverse systems, including workstations, applications, and servers, often involves complex and disjointed processes.
Solution
0pass is a passwordless authentication platform that enables secure access to workstations, applications, and servers using hardware-backed security keys and smart cards. It provides a unified solution for user enrollment, credential management, and integration with existing infrastructure, eliminating the need for traditional passwords. By leveraging standards like FIDO2 and PIV, 0pass mitigates the risk of credential theft and ensures compliance with stringent security requirements. The platform supports various deployment options, including cloud, self-hosted, and air-gapped environments, offering flexibility for enterprises with diverse infrastructure needs.
Target Audience
The primary target audience includes enterprises and organizations in high-security environments that require robust, phishing-resistant authentication solutions for employees accessing workstations, applications, and servers.
Features
- Passwordless login using FIDO2-compliant security keys (e.g., YubiKeys) and smart cards
- Support for PIV certificates for operating system logins
- Centralized credential lifecycle management, including enrollment, provisioning, and revocation
- Integration with existing identity providers, user directories, and certificate authorities
- Flexible deployment options: cloud-hosted, self-hosted, or air-gapped
- Compliance with security standards and frameworks, including NIST 800-53/63/171, PCI DSS v4.0, DoD CMMC Level 3, ISO27001, and OMB Zero Trust Requirements
- Support for hardware-backed security modules native to Apple and Windows