Intercede

Password screening against breached credentials

Intercede's MyID platform covers the full range of authentication, from password screening to smart cards and passkeys. Its password tool, MyID PSM, screens workforce passwords against a database of more than 11 billion breached credentials and applies NIST SP 800-63B policy each time a password changes. Employees can reset their own passwords, which the company says reduces helpdesk load.

PKI and FIDO credential management

MyID CMS is the credential management system for issuing and managing PKI credentials and FIDO2 passkeys. It covers issuance, renewal, revocation and recovery across on-premise, private cloud, hybrid and air-gapped networks. Credentials can take the form of smart cards, USB security keys, mobile credentials, Windows Hello for Business or FIDO2 passkeys. Native connectors work with Microsoft, Entrust, DigiCert and EJBCA, and the product integrates with Microsoft Entra ID.

Phishing-resistant multi-factor authentication for staff

MyID MFA provides multi-factor authentication for a workforce, with phishing-resistant methods built on the same credential infrastructure. Identity proofing comes before anything is issued. Enrolment uses high-security checks, biometric capture and background checks, so that credentials go only to people who have been verified.

Key archival, recovery and secure storage

MyID SecureVault handles key archival and recovery, with biometric data storage. It can generate, store and recover RSA and ECC private keys, with optional protection in a hardware security module (HSM). Key archival works independently of the certification authority in use.

Government identity programmes and published case studies

Government is a core market for the platform. Published case studies include a US federal aviation agency that adopted MyID as a single management system for card and credential issuance, and a US energy company with 12,000 employees that needed access control for its corporate systems and a nuclear power plant. A US health services provider with 160,000 staff used the platform for strong authentication, and a European bank secured its workforce with it. The product is presented as supporting FIPS 201 PIV and PIV-I credential issuance for federal use.

Post-quantum roadmap and technology partnerships

The company says post-quantum cryptography is being rolled out across the MyID product family, with ML-DSA and ML-KEM available through EJBCA. Partnerships with hardware, software, chip and cybersecurity providers focus on secure digital identity issuance and lifecycle management, and a featured partnership with Yubico is listed alongside them.