Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Multifactor Raises 15 Million Dollar Seed Round to Secure Online Accounts for Humans and AI Agents
Multifactor has raised 15 million dollars to expand its post-quantum platform for securing online accounts used by both people and AI agents. Instead of traditional password management, the system issues revocable, capability-based access links that grant specific permissions without exposing credentials. Actions are cryptographically signed and auditable, aiming to mitigate risks such as prompt injection and cross-agent hijacking. The company, founded by former national security and cryptography specialists, sees demand rising as organizations allow autonomous agents to operate across SaaS and financial platforms.
Login.gov Maintenance Temporarily Blocks Online ID Verification for North Carolina Residents
Login.gov scheduled maintenance that temporarily prevented North Carolina residents from completing online identity verification, due to downtime at a downstream driver license data provider. While single sign-on remained available, users attempting identity proofing with NC credentials faced failures during the maintenance windows. Similar outages have occurred with other states, underscoring operational dependencies between federal digital ID systems and state-level data sources. Agencies relying on Login.gov may need to strengthen fallback procedures for geographically targeted disruptions.
RSA Extends Passwordless to Desktop Logons and High-Assurance Environments
RSA is expanding passwordless authentication to Windows and macOS logons through RSA ID Plus, with hardware-based options designed to meet high-assurance federal requirements. The iShield Key 2 enables tap-based AAL3 authentication, while offline-friendly OTP and FIDO2 flows support constrained environments. RSA is targeting sectors such as defense, critical infrastructure, and shared workstation environments where credential theft and lateral movement remain persistent risks. The rollout also includes identity posture management features to help organizations address misconfigurations and weak factors across hybrid systems.
Autocrypt Launches Post-Quantum PKI for Automotive OEMs
Autocrypt has released AutoCrypt PKI-Vehicles, a post-quantum PKI solution supporting ML-DSA, the digital signature algorithm selected by NIST for PQC standardization. The platform issues and manages certificates for in-vehicle systems and V2X components, operating alongside classical cryptography to ease long-term migration. Autocrypt positions the product as preparation for regulatory and industry pressures as connected vehicles become long-lived assets vulnerable to future quantum threats. The company plans to showcase the system at CES 2026.
Documents Show Fresh DHS Award to Clearview AI for Investigative Software
New procurement records show that U.S. Immigration and Customs Enforcement has awarded a multi-million dollar contract to Clearview AI for facial recognition software, with performance running into 2027. The award, issued on a sole-source basis, includes an initial obligation of 3.75 million dollars, with summaries suggesting a total potential value above 9 million dollars. The contract continues DHS’s use of Clearview across investigative units despite ongoing legal and ethical scrutiny. Oversight, justification for sole-source procurement, and governance of investigative use remain central concerns.
FIDO Alliance Tightens Authenticator Verification with Metadata Service Update
The FIDO Alliance has updated its Metadata Service to strengthen how relying parties verify passkey and authenticator devices, introducing stricter publishing rules, enhanced attestation checks, and clearer indicators of certification status. A new Convenience Metadata Service offers a simplified integration path for developers that do not require the full MDS feature set. FIDO is urging vendors and service providers to migrate to the new versions to improve trust decisions, reduce inconsistent policy enforcement, and better screen weak or outdated authenticators at scale.
Sumitomo Mitsui Trust Bank Shifts to Cloud FIDO Authentication for Mobile Banking
Sumitomo Mitsui Trust Bank is moving to cloud-based FIDO authentication for its retail mobile banking app through a deployment led by SCSK and OneSpan. The rollout replaces legacy login and transaction authentication mechanisms with phishing-resistant, device-bound FIDO credentials. The project reflects rising fraud pressure and aligns with regulatory expectations for strong customer authentication in Japan. The bank plans to extend FIDO deeper into transaction-level controls to balance ongoing risk management with a simplified user experience.
CLEAR Deepens Push Into Healthcare With New Digital ID Integrations From Sharecare and Welldoc
CLEAR is expanding into healthcare through integrations with Sharecare’s upcoming AskMD platform and Welldoc’s AI-driven cardiometabolic suite. Both deployments use CLEAR’s identity verification layer to bind users to clinical data, benefits information, and personalized AI-generated insights. The integrations position CLEAR as a reusable identity provider for health applications participating in CMS’s Health Tech Ecosystem. The move highlights increasing reliance on third-party digital identity networks in healthcare and raises questions around data governance, biometric retention, and oversight as digital health platforms scale.
—
By the ID Tech Editorial Team