Authentication designed for security

Even with your password, they can't get in.

A new kind of sign-in and payment approval. A stolen password, a leaked database or a fake login page is never enough, and how we do it is patent pending.

About Auth22

A security package that plugs into the systems you already have

Auth22 isn't another login service. It's a software package you license from us and integrate into your own systems. It sits behind the sign-in you already have and makes it far harder to break.

You run it, so you keep control. We don't host anything, we never see your users, and nothing you have today needs replacing.

  1. 1

    Connect it to your systems

    Your existing login, identity checks and payment flows talk to it through a simple API. They stay exactly as they are.

  2. 2

    Run it where you run everything else

    One service and a database, in your own cloud or data centre, under your own controls.

What it stops

Stolen credentials become worthless

Passwords get guessed, phished and leaked. Auth22 doesn't depend on keeping them secret. How? That's patent pending, and we show it in person.

Stolen passwords

An attacker with the right password is still refused. Bought, phished or guessed, it makes no difference.

Attacker signs in with
pw: •••••••• checking…✕ refused

Leaked databases

An attacker with a full copy of your user database can't sign a single person in with it.

Stolen copy of your database
trying it…0 sign-ins

Tampered payments

An approval covers one exact amount and one payee. Change either and it's void. A flood of fake prompts can't wear anyone down into a yes.

Approved: J Nguyen
$1,240.00$9,240.00 ✓ approved✕ void
PATENT PENDING

Our own method. Not yet published.

The way Auth22 protects every sign-in is the subject of a filed patent application, and it isn't published. You won't find it on this website. Your security team gets the full walk-through in person, under NDA.

Ask for a walk-through ->
Built for security teams

Yours to run, inspect and control

Auth22 is a software package you license from us, not a hosted service. It runs inside your system and on your infrastructure, and nothing about your users ever reaches us.

Fake login pages get nothing

A look-alike login page captures nothing it can use to sign in. No SMS codes to intercept, either.

Runs on your infrastructure

The engine is a container you deploy. Nothing about your users passes through Auth22, and we hold no user data.

Inside your own system

Works on Android and iPhone, under your brand. Nothing extra for your users to download.

No slower for your users

A full sign-in takes under a fifth of a second, even on a budget handset.

A record of what was approved

Every approval records exactly what was approved. That's evidence in a dispute, not just a line saying "approved".

No surprises on upgrade

Every protection that could turn a user away is off until you switch it on, and each one is named at startup.

Tested on real handsets

Fast enough that nobody notices

Measured on physical handsets running release builds, not simulators.

190ms

for a full sign-in on a budget Android handset

323ms

to set up a new user on the same handset

2

platforms: Android and iPhone

Web coming soon

Who it's for

For any system where a stolen login costs money

Banks and credit unions

Member sign-in and payment approval that a stolen password can't break. Built with Australia's Scams Prevention Framework in mind; obligations begin 31 March 2027.

Fintechs and payments

Approvals locked to the exact amount and payee, with a record behind every one. Strong customer authentication without SMS codes.

Any high-value account

Wallets, trading, health, admin consoles: anywhere an account is worth stealing, a stolen password shouldn't be enough to take it.

To be straight with you: no sign-in product stops a scam where the account holder is talked into approving a payment themselves. Auth22 makes sure that it really is them approving, and exactly what they approved.

Want to know how? Let's talk.

The method isn't published. Tell us a little about you and we'll get back to you to show it working, and how it would fit your system.

We only use these details to reply to you.