Identity Verification Software Resources

Biometric authentication is one factor in the authentication equation, specifically something you are. Defeating a well-implemented identity system requires compromising multiple independent mechanisms simultaneously, and biometrics alone do not provide that depth. xAuth supports the complete factor library across knowledge, possession, and biometric categories, including xFace server-side verification, voice biometrics via xVoice, passkeys, TOTP, push notifications, and registered device signals. Layering factors also improves resilience when one factor encounters environmental limitations. Daon customers who offer multiple biometric options rather than a single factor report near-elimination of biometric login failure, because when one factor cannot be used due to conditions, another succeeds. Stronger layering means a higher cost for any attacker to overcome.

xAuth extends standard passkey deployments with four capabilities that regulated industries regularly encounter. Device registration flagging identifies and acts on passkey transactions presented from unregistered devices. MFA step-up adds strong additional factors for enrollment edge cases or devices that lack passkey support. Transaction Data Signing provides full traceability and non-repudiation of customer actions. And xFace server-side biometric step-up handles high-risk transactions and self-service account recovery where device-level assurance is not sufficient. On TrustX, a passkey can also be automatically generated from an xProof IDV workflow, cryptographically linking the authentication factor to the verified customer identity from day one.

Daon's facial biometric capabilities have been evaluated across multiple independent testing programs. NIST FRVT testing validated 1:1 verification and 1:N identification accuracy. NIST FATE testing in August 2025 ranked Daon's face quality assessment algorithm first of 56 products in one of the two scored scenarios. iBeta PAD testing at both Level 1 and Level 2 produced 100% success rates. The algorithms have also been evaluated specifically for 3D artifact detection and injection attack detection as separate testing criteria. All NIST programs use sequestered datasets with no vendor access in advance, making them the most credible independent benchmarks available.