Passwordless Authentication

Passwordless authentication that verifies the human, not the credential.

Passwords prove that someone knows a secret. Confrmo proves that the authorised person is actually present. A VCode appears on screen, the user scans it with the Confrmo app, and face, liveness and device trust are verified before access is granted. There is nothing to remember, nothing to reset and nothing to phish.

How passwordless login works with Confrmo

When a user signs in, your site displays a VCode instead of a password field. The user scans it with the Confrmo app on their paired device, or taps it if already on mobile. Confrmo runs facial verification across more than 760 micro-features with active liveness, checks device integrity and context, and returns approve, step up or block. The whole exchange typically completes in seconds and every approval is signed and audit-ready.

Why passwordless matters now

Credential theft remains the leading cause of account takeover, and password resets are a constant support cost. AI-generated deepfakes have also started defeating naive biometric checks, which is why Confrmo pairs recognition with liveness challenges that resist replay, injection and presentation attacks.

Where to deploy it

Websites through the drop-in SDK, WordPress through the official plugin with no theme rebuild, and native apps through the iOS and Android SDKs. Most teams have their first passwordless flow live in under a day.

Common questions

What teams ask first.

Is passwordless login safe if my phone is stolen?
Yes. Possession of the device is only one signal. The thief still has to pass facial verification with liveness against the enrolled user, so a stolen handset does not become a stolen account.
Do users need to install anything?
Users verify through the Confrmo app on their trusted device. Your website or WordPress site needs only the SDK or plugin.
Can I keep passwords as a fallback?
You can run Confrmo alongside existing authentication and migrate gradually, or use it as a step-up layer on sensitive actions only.

See it on your own use case.

Thirty minutes with the team, mapped to your product and your risk.