Glide.id has opened a US public beta of MagicalAuth, a passwordless authentication service that uses cryptographic keys held in mobile SIMs and now works across AT&T, T-Mobile and Verizon.
The service is available on iOS and Android without requiring users to install a separate authentication app. It is intended to replace passwords and SMS one-time codes with proof that the person attempting to sign in controls the mobile subscription associated with an account.
During authentication, a service sends a mathematical challenge through Glide.id to the user’s phone. A carrier-issued key in the SIM completes the challenge, producing cryptographic proof of possession without exposing the key or asking the user to copy a code from a text message.
The SIM provides a hardware-backed trust anchor already distributed by mobile network operators. MagicalAuth can therefore be added to a service without asking customers to enroll another device credential, while the carrier relationship supplies a persistent link to the mobile account.
Glide.id is offering the system to developers and enterprises as part of a product set that also includes SuperPasskey. The latter combines the SIM-based signal with passkey-style authentication for services that require another layer of user verification.
Other identity vendors are also using SIM security for enterprise authentication. Hirsch and Unibeam recently integrated SIM-bound cryptographic authentication into an enterprise identity platform, using the mobile subscription as a possession factor for workforce access.
The launch also enters a market moving toward consolidated passwordless platforms. OneSpan introduced DigipassONE as a unified authentication service covering passkeys, biometrics and risk-based controls across workforce and customer use cases.
Glide.id has live carrier integrations in Germany, Spain and the United Kingdom in addition to the new US coverage. Work is underway for Canada and further markets during 2026, with availability depending on integration with participating mobile operators.
Because the cryptographic operation occurs through the carrier credential, the service is distinct from an SMS code that can be read, forwarded or intercepted. Applications receive a signed authentication result through Glide.id rather than direct access to the SIM key or the user’s carrier account data during each sign-in attempt.
Sources: Business Wire, Glide.id
–
By the ID Tech Editorial Team
