Proof of identity
Which account is being used, at what level of assurance, and does the person hold a credential that only they control?
Authentication & intent verification
Prove it is really you.
Verify the person. Verify the action. Verify the intent.
Secure authentication for people, businesses and the AI era. REAL AUTH lets participating applications and users confirm that the real, authorised person deliberately approved a specific login or request.
Proof of identity · Proof of device · Proof of intent
Login request
Example
- Website
- example-shop.com
- Account
- a.taylor@example.com
- Organisation
- Northwind Trading
- Role
- Finance manager
- Device
- Chrome on Windows
- Expires
- in 2 minutes
Approving asks your device to confirm it is you, locally. Your fingerprint or face never leaves the device.
What a login should actually establish
A password only proves that someone knew a password
REAL AUTH separates three questions that are usually collapsed into one, and answers them independently.
Proof of device
Which trusted device is involved, is it known to the account, and is its key protected by the operating system rather than copied from somewhere else?
Proof of intent
Did the person see and approve this exact request — this site, this account, this role, this amount, this destination — rather than approving something in general?
One trust layer. Many use cases.
The same verification, applied wherever people can be impersonated
Login is only the most familiar case. The harder problems today are urgent requests that sound genuine.
Secure login
Verify who is signing in, from which device, with which role.
Learn more →Family scams
A call that sounds like your child asking for money urgently. Ask the real person before you act.
Learn more →Phishing & impersonation
Verify a sensitive request through an independent channel instead of trusting an email or message.
Learn more →Deepfakes
A convincing imitation of a voice or face still does not hold the trusted credential.
Learn more →Payment fraud
Confirm the exact amount, beneficiary and destination account before money moves.
Learn more →Business impersonation
Check whether the employee is real and whether they actually have the authority.
Learn more →Crypto & wallet verification
Confirm the network, asset, amount and destination wallet for a specific transaction.
Learn more →The central idea
Change the question you are asking
Judging whether a message, a voice or a video looks real is getting harder every year. Asking whether the authorised person approved this exact request is a question that can still be answered.
Do not only ask
“Does this message, voice or person look real?”
Ask instead
“Can the real authorised person prove that they deliberately approved this exact request?”
Where REAL AUTH fits
Passwords, passkeys, and the layer above them
Layer one
Passwords prove what you know
And anything you know can be phished, reused, guessed or read from a breach. REAL AUTH still supports passwords for migration and limited recovery, but never recommends them as the primary method.
Layer two
Passkeys prove what you hold
A device-bound credential, unlocked locally by your face, fingerprint or PIN, that cannot be copied off the device or replayed on a look-alike domain. REAL AUTH uses WebAuthn and FIDO2 for this.
Layer three
REAL AUTH adds context and explicit approval
Which site is asking, which account and organisation, which role, which action, which exact values, and for how long. The approval is bound to those values, so it cannot be reused for a different request.
What REAL AUTH does not claim
REAL AUTH does not detect every scam, deepfake or phishing attempt, and it does not replace user awareness, anti-malware, email filtering or browser security. It adds an independent verification and approval channel where an organisation or person has integrated it.
Seeing or hearing someone is no longer always enough
Start with a free sandbox, test the flows against your own application, and move to production when you are ready.