Biometric-first identity

Identity that starts with a real face.

No passwords. No codes. No recovery emails to hijack. Every login proves a live person is present — nothing else.

A live face check on every login. Document match at enrolment.

See it in action Explore capabilities

The problem

Secrets are the weakest link.

Passwords get phished. One-time codes get SIM-swapped. Recovery emails and helpdesk resets get socially engineered. And generative AI makes deepfakes and injection attacks cheaper every month.

Most identity systems still rely on something that can be stolen or replayed. EntryIdP removes the secret entirely. The only way in is a live human in front of the camera.

By design

No passwords. No one-time codes. No recovery questions. Ever.

One factor, always

A live face is the only way in — every time. Adding fallback passwords or codes would quietly reopen the doors we closed.

Humans only

Built exclusively for people. Machine and service identities are a different problem, deliberately excluded.

A login for applications

EntryIdP is the sign-in experience for your apps — not a device login, VPN, or network gateway product.

How it feels

Login that feels like looking in a mirror.

Step 01

Look at the camera

Your phone or laptop camera opens — that's the login form.

Step 02

A short liveness check

A few seconds of movement and light confirm a real, present person — not a photo, video, or mask.

First time only

Match your face to your ID

At enrolment, your face is compared to the photo on your ID document. After that, your face alone signs you in.

Step 04

You're in

No password. No code from a text message. No app to approve.

Nothing to remember. Nothing to reset. Nothing to phish.

Capabilities

What EntryIdP delivers.

Built for organisations that need to know a real human is present — not just that someone knows a secret. Tap any card for the fuller story.

Live  running today Coming soon  on the roadmap By design  a deliberate boundary

Prove a real person is present

One human, one account

Stronger than a password, simpler than traditional MFA

Identity your organisation can trust

Built for real organisations

Operate with confidence

Trust & security

Designed for the attacks that actually happen now.

The cheapest and most common modern attacks target secrets and recovery paths. Those paths do not exist here.

  • The system itself decides whether the live check passed — never the device.
  • The face image used to identify you is never supplied by the browser.
  • A stolen session token cannot be replayed — the whole session family is revoked the moment it's tried.
  • Face-to-document matching fails closed: any doubt means no.
  • Nothing to phish, SIM-swap, or socially engineer.

Your face, your data

Nothing biometric happens without your explicit consent, asked for in plain language before enrolment begins.

Your ID document image is deleted once enrolment completes. Your enrolment selfie is kept securely so your biometric identity can be restored if the face index is ever lost — and it goes when you delete your account.

You can see every consent you've given, export your data, or delete your account yourself — no support ticket required. Deleting removes your profile, activity and documents. Your face template is retained in a blocked state so it can never sign in again, which stops a deleted account being used to re-enrol and evade a ban; complete biometric erasure is available on request.

Where we're honest about the edges: full bureau-grade identity verification is still on the roadmap, making the age of the "live human present" proof visible after a token refresh is a longer-term item, and continuous behavioural monitoring is deliberately out of scope.

Use cases

Where EntryIdP fits.

Financial services & fintech

High-assurance login and step-up for sensitive actions — without SMS fatigue.

Talk to us →

Healthcare & age-gated services

Stronger proof that a real, present person is behind every account and order.

Talk to us →

Marketplaces & loyalty

One real human, one account. Duplicate and throwaway accounts stop at the door.

Talk to us →

Multi-tenant platforms

Clean isolation plus a branded, scoped admin experience for each of your customers.

Talk to us →

Anywhere passwords hurt

Any service that wants to know a live human is present, without adding password or OTP friction.

Talk to us →

What's next

What's live and what's coming.

Live today

  • Face-liveness login on every sign-in
  • Face-to-document match & document text checks
  • Passport detail prefill at enrolment
  • Approval control over who gets into each application
  • Multi-organisation support with scoped admin portals
  • Self-service privacy tools (export, consents, deletion)
  • Rotating tokens with replay defence

Longer term

  • Fresher "live human present" proof after token refresh
  • Native step-up checks for high-risk actions
  • Partner federation
  • Richer API scopes
  • Connector catalogue, if demand justifies it

Want to influence the roadmap or see a private demo? Request a conversation.

Writing

Notes from the build.

Long-form engineering write-ups on how EntryIdP was actually built — and what we got wrong on the way.

· Synapser · ~15 min read

When the Code Outruns the Architecture

Every article about AI-assisted development says the same thing: iterate fast, keep the process light. Building a biometric identity provider, I did the opposite — full specification first, phase gates, formal sign-off — and the reason it held up inverts the usual objection.

Read the post →

All writing

Ready to see a live human login in action?

Book a short demo, or just start a conversation about your use case.

Request a demo Contact us