Frequently Asked Questions
To find specific information regarding particular products and services, please see categories below: WWPass, PassKey, PassKey App, PassHub.
What is WWPass?
WWPass is an authentication service that secures your accounts without usernames and passwords. Instead of remembering and typing your login info, we grant access through our authentication devices called PassKeys.
Check out our white paper for more information!
What’s wrong with passwords?
Usernames and passwords are easily stolen. From phishing attacks to network intrusions, your login info will always remain vulnerable.
Knowing your login and trying to keep it safe isn’t enough, so we devised a system where your primary login is something you have.
How do you replace passwords?
Instead of proving your identity with a username and password, you use your PassKey—an authentication device that only you possess. This password-less system prevents revealing data to anyone, which defends against common hacking attempts.
How is WWPass different?
- No usernames or passwords to prove identity
- Same login for multiple accounts
- Superior protection of a distributed data store network
- Save time, eliminate password recovery
- Drastically reduces costly data breaches
What does WWPass authentication QR code consist of? How secure is it?
The only thing the QR code contains is a random authentication session ticket, which does not disclose any user information to attackers. This is an important difference between WWPass QR codes and QR codes used by other companies/authenticators, which often encode unnecessary and unsafe personal identifying information.
It is important to remember 3 things about QR Codes:
- They are just a transport tool, and how the tool is used is the most important factor regarding your security.
- If a company encodes things like personal identifying information or usernames in a QR code, this is both unnecessary and unsafe –WWPass does not do this; only a random authentication session ticket is used.
- Even if someone stole your PassKey, they can’t automatically get in everywhere just by scanning the QR code –an additional verification factor like a PIN, fingerprint or facial recognition would also be needed. Additionally you can restore your PassKey onto a new mobile device, which will instantly block the stolen PassKey.
What encryption do you use?
We use well-established encryption algorithms and cryptographic protocols which are industry-standard and have no reported vulnerabilities. WWPass utilizes RSA-4096 for Service Provider certificates and AES-128/3DES for PassKey authentication. For PassHub, we use AES-256 for symmetric and RSA-2048 for asymmetric cryptography.
How do I get started?
For anyone wanting to upgrade their security and skip passwords, you can download PassKey App and start using PassHub for free right now!
What's a PassKey?
A PassKey is our physical security device that comes in the form of a USB token or Smart Card. It works as a cryptographic microcomputer that replaces usernames and passwords to log you in faster and more securely.
How does PassKey work?
When you navigate to an enabled website or service, the screen will display [Log in with PassKey]. If the PassKey is connected, authentication just requires one button tap.
What if I lose my PassKey?
You can manage a lost PassKey by visiting Key Services. You will need your Service Key and PIN to activate/deactivate/recover it.
What if I lose my Service Key?
Service Keys can be deactivated and reactivated with another Service Key. Two Service Keys come standard with each set as backup options. Losing all of your Service Keys means you won't be able to manage your PassKey.
What if I forget my PIN?
You can reset your PIN anytime through Key Services if you have a Service Key.
What else can I do with PassKey?
With WWPass PassKey, you can log you into any of these WWPass-enabled services—never rely on usernames or passwords again. Log into PassHub, which makes signing into your password-based accounts faster and far more secure.
What’s PassKey App?
PassKey App is a free mobile app for iOS and Android that turns your mobile device into a convenient PassKey. It will allow you to log into PassHub or any WWPass-enabled website without installing any software on a computer. Watch it in action!
How do I use PassKey App?
You can authenticate quickly and securely on any WWPass-enabled website or application without a username or password. Instead of a password form field, the login screen presents the WWPass QR code which you scan with your PassKey smartphone app.
When you need to login just on your smartphone, tap the QR code to activate the PassKey App and it will automatically activate!
Does PassKey App activation require a computer?
No, a computer is not required. You only need access to the email address you provide during activation and your smartphone.
Can I have the same PassKey App installed on multiple devices?
Currently, PassKey App is limited to one key per device. They cannot be used interchangeably or duplicated to another smartphone.
How is my PassKey App protected?
Your PIN provides a solid additional authentication factor, like a debit card. PassKey App itself utilizes multiple authentication factors by design. And when you lock your smartphone, it becomes far more scure than a password alone.
How do I get the WWPass QR code on my website?
Developers can add the QR code to their website or service in a few simple steps. Instructions are available here.
Don't hesitate to contact us for information or support!
What if my phone is lost, damaged, or stolen?
Restoring your PassKey App is as simple as installing the app on your new phone and running the Recovery option. Instructions are available here.
We recommend setting up recovery in the event of a lost PassKey App if you haven’t already. Recovery setup can be done anytime through the in-app settings. PassKey App information on the old device will automatically deactivate.
I forgot my PIN. How do I reset it?
Setting a PIN is crucial to securing your PassKey App, and it cannot be reset. PINs are required as a secondary authentication factor and for associating your PassKey App to your device.
What if I did not get my validation email?
Check your junk mail or spam folder. The sender should be email@example.com. Also, verify that the email address you provided is the correct email address. If this does not help, please contact us.
Most online services will still require passwords. For your password-based accounts, keep them in PassHub: WWPass’s free password manager. Your login info is kept in a secure directory, or safe, which are accessible only through PassKey or PassKey App.
How is PassHub better than other password managers?
PassHub’s authentication system counters data breaches or leaks because it’s secured with PassKey, not another password. Also:
- It works with any browser and any device
- Our interface is streamlined and non-intrusive
- Unlike others, we CANNOT access your passwords
- It’s open source and free! Try it out yourself!
Can PassHub employees see my passwords?
No, your passwords are only accessible to you or the users you authorize. We want to maximize everyone's security, so PassKey is the only way to read data within PassHub.
Can I share passwords with my friends or team?
Yes! You can share your password safe with anyone who has a PassKey or PassKey App and access can be granted or revoked at any time.
Select “Share” from the safe drop down menu to generate a sharing code. Sending this code to employees will allow them access to your safe after a few easy steps and final confirmation from you.
Does everyone need a PassKey to see my passwords?
Yes, PassKey or PassKey App is the only way to authorize access to PassHub. This feature minimizes the overall exposure of your login info, making it one of the most secure methods of accessing accounts.
Can I host PassHub on my server?
We provide PassHub for free on our network, but we understand if you want to take extra security precautions. PassHub is open source, and you may host it wherever you like.
Check back soon for more info!
How long will it take to set this up for my team?
It depends on how many users you need to register and the type of devices you wish to integrate, but you can be up and running in less than a day.
Don't wait for a breach, to get serious about security. Give us a call today!
We have the capabilities to customize our solution to your customer's needs. Let's talk and see if we're the right fit for your business.