Rising Star Allthenticate

Short Summary

Allthenticate is a 2019-founded MIT spinout headquartered in Houston, Texas, offering a subscription-based passwordless authentication platform designed to unify digital and physical access through a single smartphone credential. Built on patented research that began in 2008 at MIT Lincoln Laboratory with DoD funding, the company has raised $7.9 million to date, including a $3.1 million pre-seed round. Its core promise is that one enrolled phone can unlock computers, servers, web applications, and office doors without passwords, hardware tokens, or badges, extending across Windows, macOS, and Linux and even covering sudo and SSH workflows.

The platform functions as an OIDC and SAML identity provider, enabling passwordless single sign-on to cloud and on-premises applications without relying on a separate directory password. Authentication is based on device-generated public/private key pairs where private keys never leave the phone or the machine. Proximity-based login uses Bluetooth to exchange public keys within a defined physical range, automatically unlocking sessions within a few hundred milliseconds and locking them when the phone exits a configurable boundary. This boundary is measured via Bluetooth RSSI and can be calibrated per user and per phone to address variability in handset antenna performance.

Allthenticate emphasizes an “attacker-first” design, highlighted by a device-bound roaming passkey that emulates a USB connection over Bluetooth for phishing resistance, and by “Rescue Mission,” a patented decentralized account recovery approach. Recovery is initiated through a lost-phone process that sends requests to five or more trusted contacts holding Shamir Secret Sharing fragments; a majority verifies the user via short recorded video before keys reconstitute on a new device, ensuring no single party can reconstruct credentials alone. Analysts rate innovation highly while identifying market visibility, integrations, competition, and scaling a Bluetooth-dependent hardware/software stack as key challenges.

Interesting Facts

• Allthenticate was founded in 2019 and is headquartered in Houston, Texas.
• Allthenticate is an MIT spinout built on patented authentication research that began in 2008 at MIT Lincoln Laboratory under DoD funding.
• The company has raised $7.9 million to date, including a $3.1 million pre-seed round.
• The licensing model is subscription-based.
• Geographic focus includes North America, Europe, the Middle East, the United Kingdom, Australia, and New Zealand.
• The platform can unlock computers, servers, web applications, and physical doors using a single smartphone credential without passwords.
• The system operates as an OpenID Connect (OIDC) and SAML identity provider for single sign-on.
• Proximity-based login uses Bluetooth and unlocks sessions in a few hundred milliseconds without taps, codes, or MFA prompts.
• Proximity boundaries are measured using Bluetooth RSSI and can be calibrated per user and per phone.
• Rescue Mission account recovery uses five or more trusted contacts holding Shamir Secret Sharing fragments, requiring a majority to vouch via short recorded video before keys reconstitute.

Notable Quotes

• “Allthenticate unifies physical and digital access under one phone-based credential and gives account recovery a credible, decentralized answer.”
• “Account recovery, historically an afterthought, will increasingly become a differentiator on its own.”
• “Its platform turns a smartphone into a single credential that unlocks computers, servers, web applications, and office doors without a password.”
• “The private key never leaves the phone or the machine it belongs to.”
• “The result is proximity-based login: a user simply walks up to a laptop or a web browser, and the session unlocks in a few hundred milliseconds without a tap, a code, or a Multifactor Authentication (MFA) prompt.”
• “Allthenticate's founders describe building the platform attacker-first, meaning the threat model came before the solution design.”
• “No single party, including Allthenticate itself, ever holds enough fragments to reconstruct someone’s credentials.”
• “Decentralized recovery and in-house door hardware give Allthenticate a genuine point of differentiation.”
• “Passwordless authentication has become a strategic priority for enterprises seeking stronger security, operational efficiency, and an improved user experience.”
• “The next twelve months for Allthenticate will likely be defined less by feature additions than by proving it can scale support, documentation, and integrations fast enough to convert pilot enthusiasm into enterprise-wide deployments.”