Time-based OTP, WebAuthn passkeys, FIDO2 hardware keys, Argon2-hashed recovery codes, and brute-force lockout. Enrollment in 90 seconds, enforcement in one click.
Works with every authenticator your team already uses
A compromised VMS credential gives attackers the ability to see, delete, and tail. MFA is the cheapest mitigation.
Attackers who breach a VMS can disable cameras, delete evidence, or tail a victim in real time. Passwords alone, even strong ones, fall to phishing, credential stuffing, and malware keyloggers. MFA raises the cost of compromise by orders of magnitude.
Cyber-insurance renewals now ask directly: is MFA enforced on all admin accounts? SOC 2 Type II, ISO 27001 Annex A.9.4.2, and HIPAA Security Rule 164.312(d) all treat MFA as table stakes. Checking the box takes one afternoon with Visylix.
Prompt-bombing attacks work against push-MFA and SMS. Passkeys require a physical tap on a device the user controls, no prompt to spam, no code to phish. Pro tier passkeys end MFA fatigue entirely.
TOTP, passkeys, hardware keys, recovery codes, lockout, enforcement, all built in, all audited.
Phishing-resistant passwordless authentication. User taps Touch ID, Face ID, Windows Hello, or a hardware key, no code to type, no OTP to intercept. Backed by cryptographic keys that never leave the authenticator.
YubiKey 5 series, SoloKey, Feitian, and any CTAP 2.0 device. FIDO2 Level 1 and Level 2 certified authenticators supported. Works USB-A, USB-C, NFC, and Lightning. Keys can be enrolled via the user profile UI.
Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden, Duo Mobile, FreeOTP, any RFC 6238 compliant app. QR-code enrollment, 30-second windows, 6-digit codes.
Ten single-use recovery codes issued at MFA enrollment. Hashed with Argon2id (memory-hard, side-channel resistant). Visylix cannot read them back, users must save at enrollment time.
Five failed MFA attempts within 15 minutes locks the account for 15 minutes. Source IP tracked for anomaly detection. Multi-account failures from one IP trigger automatic SOC alerts.
Require MFA for admins, operators, or any custom role. Enforce organization-wide, or layer: TOTP minimum for all, passkey minimum for admins. Break-glass admin account excluded by policy.
Starter gets TOTP and recovery codes on day one. Pro unlocks passwordless passkeys and enforcement policies.
Regional hospital network, 6 facilities, 1,200 cameras. Passkey rollout: 42 admin accounts, completed in one shift. Zero password resets since.
TOTP is included on every Visylix plan. Passkeys unlock on Pro and above. Enrollment takes 90 seconds per user.