FAST: Face-Verified 2FA for a Multi-Tenant Authentication Platform

Auth login was set up with passwords, backed up by a physical token as a second check. Staff passed passwords and tokens around freely, so a login only showed that someone had the right secret, never who that someone was. Building a stronger check meant verifying real identities, which no team wanted to take on.

• A token can be handed to a colleague just as easily as a password can.
• Nothing linked an account to a real, checked identity, so a login could not be traced to a person.
• Staff signing in from the field failed often, because weak connections made the check slow and unreliable.
• Adding login to an existing app took 2-4 weeks of engineering work for each company.

FAST handles login for other companies' apps and adds a second check that belongs to one person only: each user submits their key documents and scans their face in the FAST app to build a FAST profile, and apps check people against that profile.

• A user signs up in the FAST app, uploads their key documents, and scans their face, which together make up their FAST profile.
• To sign in, the user scans a QR code shown by the app instead of typing a password.
• The face scan happens on the user's phone and is matched against their FAST profile in the cloud, with an answer in under 1 second.
• Admins at each company set their own login rules and review sign-in history from a dashboard.
• A company adds FAST to its existing app using a ready-made kit, in about 15 minutes.