WinMagic has launched Live Key and Live Identity in Transaction, or LIT, positioning the two products as an identity assurance layer for everything that happens after a user signs in with a passkey. The Toronto company argued that phishing-resistant login has improved materially, but that bearer tokens, long-lived sessions and compromised endpoints still leave room for fraud once access has already been granted.
WinMagic said the new products are meant to keep a continuous trust signal alive from power-on to power-off rather than treating authentication as a single moment. The approach feeds endpoint signals such as login status, screen lock state, encryption state and device posture back to an identity system in real time, allowing trust to be revoked automatically when those conditions break.
Chief executive Thi Nguyen-Huu said the mismatch between the identity a system verifies at login and the endpoint or session that later receives data is the core problem the company is trying to close. In WinMagic’s framing, passkeys and biometric gestures remain useful for getting a user into a system, but they do not by themselves protect the rest of an eight-hour session or a later payment, approval or account change.
The release lands as passkeys adoption accelerates and vendors add stronger controls around workflow-level identity checks. Step-up identity verification for help desk recovery and selfie biometrics inside workforce access flows address similar gaps at different points in the session lifecycle.
WinMagic said Live Key and LIT are aimed at banks, enterprises and other organizations that need to secure sessions and high-risk transactions without repeatedly interrupting users with fresh biometric prompts or additional login friction. The announcement reframes the identity battle around continuous assurance and transaction protection rather than the initial sign-in event alone, a theme that is becoming more visible as enterprises shift from password replacement to post-login trust management.
That positioning reflects a broader shift in identity security spending. Enterprises are now looking past password replacement alone and asking how to preserve verified user presence through help desk resets, privileged actions, payment approvals and other high-risk moments that occur well after access has been granted.
Sources: PR Newswire
–
By the ID Tech Editorial Team
