Passkeys, hardware security keys, authenticator apps, recovery codes and automatic lockout. Each user is set up in about 90 seconds, and enforcement is one click.
Works with every authenticator your team already uses
A stolen video system password lets an attacker watch, delete and follow. A second factor shuts that door.
Anyone who breaks into a video system can switch off cameras, delete evidence or follow a person in real time. Passwords alone fall to phishing and stolen-password lists. A second factor makes break-ins far harder.
Cyber-insurance renewals and security audits routinely ask whether MFA is enforced on every administrator account. With Visylix, the answer is yes in an afternoon.
Attackers spam push and SMS prompts until someone taps approve. Passkeys need a physical touch on the user's own device, so there is nothing to spam and nothing to phish.
Passkeys, hardware keys, authenticator apps, recovery codes, lockout and enforcement, all built in and all recorded in the audit trail.
The strongest protection against phishing. Users confirm with Touch ID, Face ID, Windows Hello or a hardware key: no code to type and nothing for an attacker to intercept.
YubiKey, SoloKey, Feitian and other FIDO2 security keys, over USB-A, USB-C, NFC or Lightning. Users enrol keys from their own profile.
Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden, Duo Mobile or any standard authenticator app. Scan a QR code and you are set.
Ten single-use recovery codes at enrolment, stored so that nobody can read them back. Users save them once and keep them safe.
Five wrong codes in 15 minutes lock the account for 15 minutes. Limits per user and per address, and used codes cannot be replayed.
Users switch on enforcement once a factor and recovery codes are in place; switching it off needs a current factor. Pair with single sign-on for organisation-wide policy.
Every plan gets authenticator apps and recovery codes on day one. Pro adds phishing-resistant passkeys and hardware keys.
Passkeys can be enrolled for every administrator account in a single shift, with nothing new to install.
Authenticator apps come with every Visylix plan. Passkeys unlock on Pro and above. Setting up a user takes about 90 seconds.
Three. Authenticator apps such as Google Authenticator, Microsoft Authenticator, Authy or 1Password, on every plan. Passkeys on Pro and above, using a fingerprint, face or PIN on the user's own device, or a hardware key such as a YubiKey (passkeys follow the WebAuthn and FIDO2 standards). And 10 single-use recovery codes, issued when two-factor is first switched on.
Yes. Each user switches on enforcement in one click once a second factor and recovery codes are set up. Paired with single sign-on, your identity provider can require MFA across the organisation or for chosen groups, such as all administrators. Once enforced, every sign-in asks for the second factor.
They use one of their 10 single-use recovery codes. The codes are stored in a protected one-way form, so nobody, including us, can read them back. Removing a factor or switching enforcement off needs a current second factor, so a stolen password alone can never remove MFA.
Five wrong codes within 15 minutes lock the account for 15 minutes. A code that has been used cannot be used again, and password sign-ins lock separately after repeated failures.
Yes. Passkeys work directly between the browser and your own Visylix server, with no outside identity service. They work in fully air-gapped sites with any modern browser.