What is WWPass?
WWPass is an authentication service that secures your accounts without usernames and passwords. Instead of remembering and typing your login info, we grant access through our authentication application called WWPass Key.
What’s wrong with passwords?
Usernames and passwords are easily stolen. From phishing attacks to network intrusions, your login info will always remain vulnerable.
Knowing your login and trying to keep it safe isn’t enough, so we devised a system where your primary login is something you have.
How do you replace passwords?
Instead of proving your identity with a username and password, you use your WWPass Key app — an authentication application that only you possess. This password-less system prevents revealing data to anyone, which defends against common hacking attempts.
How is WWPass different?
- No usernames or passwords to prove identity
- Same login for multiple accounts
- Superior protection of a distributed data store network
- Save time, eliminate password recovery
- Drastically reduces costly data breaches
What does WWPass authentication QR code consist of? How secure is it?
The only thing the QR code contains is a random authentication session ticket, which does not disclose any user information to attackers. This is an important difference between WWPass QR codes and QR codes used by other companies/authenticators, which often encode unnecessary and unsafe personal identifying information.
It is important to remember 3 things about QR Codes:
- They are just a transport tool, and how the tool is used is the most important factor regarding your security.
- If a company encodes things like personal identifying information or usernames in a QR code, this is both unnecessary and unsafe – WWPass does not do this; only a random authentication session ticket is used.
- Even if someone stole your WWPass Key, they can’t automatically get in everywhere just by scanning the QR code – an additional verification factor like a PIN, fingerprint or facial recognition would also be needed. Additionally you can restore your WWPass Key app onto a new mobile device, which will instantly block the stolen WWPass Key.
What encryption do you use?
We use well-established encryption algorithms and cryptographic protocols which are industry-standard and have no reported vulnerabilities. WWPass utilizes RSA-4096 for Service Provider certificates and AES-128 for WWPass Key app authentication. For PassHub, we use AES-256 for symmetric and RSA-2048 for asymmetric cryptography.
What's a WWPass Key?
A WWPass Key is our physical security device that comes in the form of a USB token or Smart Card. It works as a cryptographic microcomputer that replaces usernames and passwords to log you in faster and more securely.
How does WWPass Key work?
When you navigate to an enabled website or service, the screen will display [Log in with WWPass Key]. If the WWPass Key is connected, authentication just requires one button tap.
What if I lose my WWPass Key?
You can manage a lost WWPass Key by visiting Key Services. You will need your Service Key and PIN to activate/deactivate/recover it.
What if I lose my Service Key?
Service Keys can be deactivated and reactivated with another Service Key.
Two Service Keys come standard with each set as backup options. Losing all of your Service Keys means you won't be able to manage your WWPass Key.
What if I forget my PIN?
You can reset your PIN anytime through Key Services if you have a Service Key.
What else can I do with WWPass Key?
With WWPass Key, you can log you into any of these WWPass-enabled services—never rely on usernames or passwords again. Log into PassHub, which makes signing into your password-based accounts faster and far more secure.
WWPass Key App
What’s WWPass Key App?
How do I use WWPass Key App?
You can authenticate quickly and securely on any WWPass-enabled website or application without a username or password. Instead of a password form field, the login screen presents the WWPass QR code which you scan with your WWPass Key smartphone app.
When you need to login just on your smartphone, tap the QR code to activate the WWPass Key App and it will automatically activate!
Does WWPass Key App activation require a computer?
No, a computer is not required. You only need access to the email address you provide during activation and your smartphone.
Can I have the same WWPass Key App installed on multiple devices?
Currently, WWPass Key app is limited to one key per device. They cannot be used interchangeably or duplicated to another smartphone.
How is my WWPass Key App protected?
Your PIN provides a solid additional authentication factor, like a debit card. WWPass Key app itself utilizes multiple authentication factors by design. And when you lock your smartphone, it becomes far more secure than a password alone.
How do I get the WWPass QR code on my website?
What if my phone is lost, damaged, or stolen?
Restoring your WWPass Key app is as simple as installing the app on your new phone and running the Recovery option. Instructions are available here.
We recommend setting up recovery in the event of a lost WWPass Key app if you haven’t already. Recovery setup can be done anytime through the in-app settings. WWPass Key app information on the old device will automatically deactivate.
I forgot my PIN. How do I reset it?
Setting a PIN is crucial to securing your WWPass Key app, and it cannot be reset. PINs are required as a secondary authentication factor and for associating your WWPass Key app to your device.
What if I did not get my validation email?
Check your junk mail or spam folder. The sender should be firstname.lastname@example.org. Also, verify that the email address you provided is the correct email address. If this does not help, please contact us.
My WWPass Key shows ‘Error 500’. What do I do?
Multiple issues can cause Error 500. Try to repeat your last operation, most of the time the error resolves automatically.
If your WWPass Key consistently displays Error 500 and you are using an Apple device such as iPhone or iPad, this error may be caused by restoring your device from an unencrypted backup. If that is the case, remove WWPass Key from your device and reinstall it from App Store. Once reinstalled, restore your WWPass Key with the email address you used to create WWPass Key backup.
In any other case, contact us at email@example.com.