Prove it's you with the phone in your pocket.
Authorizer is Authpermit's authentication product: a device-bound key in your phone's secure hardware, unlocked by your face or fingerprint, approves sign-ins, actions and doors. Push approvals with number matching, QR sign-in, TOTP and HOTP, and gates that open through IoTbridger, on iOS, Android, desktop, Linux and kiosks.
Device-bound keys
Each phone or desktop makes a P-256 key in the Secure Enclave, Android Keystore or the OS keychain. Only the public half leaves the device, and every approval is a signature over that request's own nonce.
Biometrics stay on the device
Face ID, Touch ID and Android biometrics release the key locally. Authorizer receives proof, never a fingerprint or a face, so there is no biometric database to leak.
Push approvals with number matching
Your server asks; the person's phone shows who is asking, from where, and a number to match. A wrong number denies the request, which defeats approve-everything fatigue attacks.
QR sign-in
A page shows a code; scanning it with Authorizer and approving signs the person in. No password is typed, so there is none to phish.
TOTP and HOTP
Standard six- or eight-digit codes for your own users, in Authorizer or any authenticator app, with secrets sealed under your organization's vault key and every code accepted once.
Gates and kiosks with IoTbridger
A door, turnstile or kiosk shows a rotating code. An approval from a member of your organization sends the door command through IoTbridger, which delivers it, retries it and records it in its own audit chain.