Allthenticate is a passwordless identity and access management platform that provides authentication for computers, web services, and physical access points through Bluetooth Low Energy (BLE) proximity verification combined with asymmetric cryptography. The system stores credentials in hardware-backed secure elements (TEE or Secure Enclave) on user smartphones, enabling the device to function as a USB FIDO security key, store passkeys, provide SSH keys, generate time-based one-time passwords, and trigger proximity-based login. It supports Windows, macOS, and Linux through a desktop service that pairs with a mobile application over Bluetooth 5.1+, with automatic computer lock when the paired device moves out of range. The platform operates as a SAML and OpenID Connect identity provider, integrates with existing identity providers, and functions offline without internet connectivity. Authentication employs FIDO2, X.509 certificates, and OTP fallback, with cryptographic handshakes and BLE signal strength replacing passwords, one-time codes, or push prompts. The platform includes a decentralized recovery mechanism called Rescue Missions, which uses Shamir Secret Sharing to cryptographically split private credentials into encrypted fragments distributed to trusted contacts for self-service reassembly without cloud involvement.
For physical access control, Allthenticate provides the ALL IN smart door reader, which installs inside walls or electrical boxes, supports PoE/AC/DC power, and integrates with electric strikes, mag locks, legacy Wiegand readers, motion sensors, and exit buttons. Administrative capabilities encompass user and group management, smartcard assignment, magic link generation for temporary access, and policy configuration based on time, resource, location, user behavior, and user groups. The system includes resource management for doors and computers with lock state control and policy enforcement, logs all authentication and entry events, and provides real-time usage analytics through a unified administrative portal. API-driven management capabilities include certificate generation policies, domain controller bridges, Active Directory integration, LDAP synchronization, certificate signing request handling, and reissuance workflows. Developer features include SSH key management, passwordless sudo via PAM integration, automatic Git commit signing, authorized_keys synchronization across servers, and an open-source BLE library (ABle) for cross-platform communication. All API interactions are performed via a RESTful API secured with API keys or bearer tokens.
