Thales shows secret-less passwordless and recovery flows with Badge inside OneWelcome at Authenticate 2025

Thales demonstrated passwordless authentication and account recovery alternatives at Authenticate 2025 in Carlsbad, California, showing how Badge’s secret-less authentication approach operates within the Thales OneWelcome Identity Platform. The demonstrations focused on removing stored secrets from the sign in and recovery flow so organizations can avoid traditional credential reset processes while maintaining high assurance for workforce and consumer scenarios.

How secret-less authentication changes sign in and recovery

Within OneWelcome, Badge provides on demand user verification that does not rely on passwords, shared secrets or recovery questions. Thales frames the model as eliminating the need to manage or reset credentials because there is no persistent secret to recover. According to Thales’ materials, “With Badge, there is no credential recovery because there is no credential,” a design intended to reduce help desk load and exposure to social engineering that targets recovery channels. The Authenticate demos also highlighted how secret-less workflows can preserve fast access on trusted devices while allowing step up checks for higher risk events through OneWelcome’s journey orchestration.

The approach targets shared device environments in sectors such as healthcare, retail and manufacturing where multiple users authenticate on the same terminal during a shift. Rather than juggling password resets or distributing physical tokens, administrators can bind access to users through the Badge integration and enforce contextual policies in OneWelcome. Thales positions this as complementary to its Passwordless 360° initiative and the 2024 partnership announcement with Badge, which introduced secret-less authentication for shared device sign in and device turnover.

Security, risk signals and roadmap context

For regulated and high assurance use cases, OneWelcome’s risk and fraud capabilities can evaluate device reputation, behavior and transaction signals to determine when to elevate checks while keeping routine access quick. In consumer journeys, the same pattern replaces conventional account recovery with presence based verification that avoids storing vulnerable shared secrets. Thales has not disclosed pricing for the integrated capabilities, and the company described the Authenticate demonstrations as indicative of approaching production readiness for enterprise deployments.

The vendor also pointed to ecosystem momentum around secret-less methods and phishing resistant authentication at the FIDO Alliance event. Badge has continued to invest in its security leadership, adding former DARPA executive Dan Kaufman in April 2025, as previously reported by ID Tech. Background details on the integration and secret-less design are available from Thales’ engineering blog and product pages, which explain how the OneWelcome Identity Platform orchestrates authentication, step up and recovery decisions without maintaining recoverable credentials.

–

By the ID Tech Editorial Team