SecSign Technologies is a two-factor authentication provider for organisations that want to protect logins to web applications, VPNs, remote desktops and in-house systems without hardware tokens. Users approve each login on their phone or desktop, and a private key that never leaves the device proves who they are.
It suits companies that want one approach to strong authentication across a mixed estate of web, remote access and in-house systems, whether they prefer a hosted service or keeping authentication in house.
At A Glance
| Vendor | SecSign Technologies Inc. |
|---|---|
| Category | Two-factor authentication |
| Identities covered | Human users and the phones and desktops that hold their keys |
| Deployment | Cloud service or on-premise 2FA server |
| Market classification | Identity Verification |
What SecSign Technologies Does
Passwords alone are easy to steal, and hardware tokens are costly to roll out and replace. SecSign uses the user’s phone as the possession factor and pairs it with something the user knows or a biometric check. A login is granted only when both factors are presented.
Logging in is a matter of matching symbols. The browser shows an access symbol, and the user picks the same symbol in the SecSign ID app to approve the request. Because the approval happens on a device the user already carries, there is nothing extra to issue, and a stolen password on its own is not enough to sign in.
Products
SecSign ID
SecSign ID is the authentication app that users carry. It sends a push notification for each login and runs on Mac, PC, iPhone and Android, with desktop versions for staff who do not have a smartphone.
On-Premise 2FA Server
The on-premise server is for organisations that need to keep authentication in house. Administrators manage it through a graphical interface, where they handle enrolment and devices and set policy responses based on operating system, app version or IP address. It can optionally connect to a local Active Directory or LDAP directory without a mandatory sync, monitors endpoints, records access for audit and offers a REST API for user administration.
Plugins And SDKs
Plugins bring SecSign to the systems where people actually log in, from web content platforms and collaboration tools to VPN, remote desktop, Office 365, Windows logon and Unix PAM. For companies with their own apps, a white-label SDK and a company-branded ID app are available. The same two-factor approval also protects document signing through True PDF Online Signature.
Restoration And Remote Wipe
Lost or replaced phones are a common support problem for any 2FA rollout. Administrators can require users to set up a restoration code or ban the feature altogether, users can remotely wipe the app and unpair their ID from the admin panel, and a simple two-step process retrieves an ID on a new device.
How It Works
| Component | What it does |
|---|---|
| Keys | Each SecSign ID uses an RSA encryption scheme with 2048-bit private keys. The private key stays on the user’s device, protected by a PIN, and neither the PIN nor the key is ever sent to the SecSign ID server. |
| SafeKey | A patented key protection procedure guards the stored key, and the ID server locks a SecSign ID after 10 failed login attempts. |
| Trusted Execution Environment | On iOS and Android the app uses the device TEE, which protects the cryptographic keys from being copied. |
| Cloud service | The SecSign ID cloud servers run redundantly in independent data centres in a high availability environment. |
| On-premise server | The self-hosted server installs as a turnkey virtual machine, as a Java server, or on Windows or Linux, and users can be imported from existing user management systems. |
Identities And Systems Covered
| Human users | Employees and individual users who authenticate with SecSign ID |
|---|---|
| Devices | IOS, Android, Windows and Mac devices that hold the private key |
| Directories | Active Directory and LDAP |
| Access points | Web logins, VPN, remote desktop, Windows logon, and SSH, FTP and Linux login through Unix PAM |
| Federation | Office 365 ADFS and OAuth 2 |
Integrations
| Area | Integrations |
|---|---|
| Web platforms | WordPress, Joomla, Drupal, Typo3 |
| Collaboration | Atlassian Jira and Confluence |
| Remote access | Cisco VPN, Windows credential provider |
Company Background
| Founded | 1998 |
|---|---|
| Headquarters | Henderson, Nevada, United States |
| Related company | Sister company of SecCommerce GmbH in Hamburg, Germany |
Note: This overview is compiled from SecSign Technologies’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.