Trusted Identity. Anywhere. At Any Scale.
Intercede protects the world’s most security-critical organisations from the number-one cause of breach: weak and stolen credentials. From password screening against 11 billion+ compromised credentials to phishing-resistant smart cards and FIDO2 passkeys, the MyID® platform delivers the right level of authentication for every user, simply, securely and at scale.
New productIntroducing MyID Authenticate: passwordless, phishing-resistant, quantum-ready
One platform for the whole identity lifecycle.
Every credential has a life: it is issued, used to sign in, protected and eventually retired. MyID covers each stage, with MyID CMS at the core and MyID Authenticate now adding phishing-resistant FIDO authentication at sign-in.
Issue high-assurance credentials to every user and device.
Full credential lifecycle management for PKI and FIDO2 passkeys, from issuance and renewal to revocation and recovery, at scale.
- Smart cards, security keys, mobile and Windows Hello for Business
- FIPS 201 PIV and PIV-I credential issuance
- On-premise, cloud, hybrid or air-gapped
Credential management,
proven at national scale.
Strong authentication is only as strong as the credentials behind it. MyID CMS is trusted by large enterprises, financial institutions and government organisations to issue and manage them, for hundreds of users or millions.
MyID CMS
Enterprise Credential Management SystemThe identity credential platform trusted by large enterprises, financial institutions and government organisations worldwide. Full credential lifecycle management for PKI and FIDO2 passkeys, from issuance and renewal to revocation and recovery, at scale, across on-premise, cloud, hybrid and air-gapped deployments.
- Enterprise FIDO2 passkey management, with or without PKI
- Post-quantum ready: ML-DSA & ML-KEM
- Multiple CA integrations
- Microsoft Entra ID native integration
- Offline, air-gapped operation
- FIPS 201 PIV & PIV-I credential issuance
-
IssueSmart cards, security keys, mobile and passkeys
-
RenewCertificates and credentials kept current
-
RecoverReplacement and key recovery when devices are lost
-
RevokeInstant removal when access should end
MyID SecureVault
Secure Credential VaultCA-independent key archival, recovery and biometric data storage. Generate, store and recover RSA and ECC private keys with optional HSM-backed protection, OAuth2 or mutual TLS authentication and a full audit trail. The secure foundation for PKI credential key management.
MyID PSM
Breached Password DetectionEnforce NIST SP 800-63B password policy in Active Directory and screen every password against 11 billion+ known compromised credentials.
Meet MyID Authenticate.
FIDO-first. Phishing-resistant. Post-quantum ready.
MyID Authenticate makes strong authentication simple, delivering phishing-resistant FIDO authentication for Windows and third-party applications. Protect against credential-based attacks, retain control over your authentication data to support digital sovereignty requirements, and stay ready for the quantum era. Deploy it on-premise or in the cloud, and integrate it with MyID CMS when you also need high-assurance credential management.
- FIDO AuthenticationStandards-based FIDO2 passkeys, using security keys or tokenless options, deliver strong, phishing-resistant authentication while reducing reliance on passwords and vulnerable shared secrets.
- Phishing-resistant by DesignOrigin-bound cryptographic authentication helps protect against phishing and credential theft. No shared secrets are sent, and credentials cannot be used by fraudulent sites.
- Secure Windows LogonExtend strong, phishing-resistant authentication to the Windows desktop, protecting workstation access with the same FIDO technology used across your environment.
- Crypto-agile and Post-quantum ReadyDesigned to support post-quantum cryptography, helping you protect authentication for the future and adapt as cryptographic standards and threats evolve.
- Works with Your ApplicationsConnect cloud, web and third-party applications using SAML 2.0 and OpenID Connect, with RADIUS support for VPN and network access.
- Integrates with MyID CMSPair MyID Authenticate with MyID CMS to issue and manage high-assurance credentials alongside FIDO authentication.
- Token and TokenlessUse hardware security keys where a physical factor is required, or tokenless authentication where greater flexibility is needed.
- Rapid, Flexible DeploymentDeploy on-premise or in the cloud to support your data sovereignty requirements, with a scriptable PowerShell installer for fast, repeatable roll-out.
A clear migration path from MyID MFA to MyID Authenticate.
Existing MyID MFA customers can move to phishing-resistant, post-quantum ready FIDO authentication using the MyID Authenticate Migration Tool, with specialist support at every step.
- 1Talk to your account team
- 2Plan with our specialists
- 3Migrate your MyID MFA installation
Trusted where identity
security is non-negotiable.
From federal agencies issuing millions of PIV credentials to global banks securing tens of thousands of employees, organisations with the highest security requirements choose MyID.
Two million credentials, live in three months.
A US federal transportation-security agency issues tamper-resistant FIPS 201 credentials to maritime workers with MyID CMS, combining central bureau production with self-service biometric activation across 160+ enrolment centres. Over 2 million cards and 8 million certificates issued, at peak throughput of 10,000 cards a day.
Tens of thousands of credentials, managed across air-gapped national networks.
A national Ministry of Defence body modernised its PKI with MyID CMS and MyID SecureVault, issuing FIPS 201 credentials with Biometric Match-on-Card and CA-independent key storage across multiple separated networks. From defence to healthcare and education, public bodies rely on MyID to issue trusted identities that meet the strictest standards, even where there is no internet connection.
Passwordless smart-card login for a national government agency.
A German federal institute replaced password logon with PKI smart-card two-factor authentication using MyID CMS, deployed entirely on-premise against its existing Microsoft CA and Active Directory, with no cloud dependency and full self-service card recovery.
Secure, audited engineer access to every customer network.
A major international services company gave its field engineers phishing-resistant access to customer devices and systems with MyID CMS, automating certificate distribution straight to their smart cards and granting each engineer only the access they are currently authorised to hold. Existing smart cards and USB devices were reused, so roll-out caused minimal disruption. From services and finance to energy and technology, enterprises use MyID to secure their workforce without replacing what already works.
12,000+ bank staff on strong PKI, using the infrastructure they already had.
A leading European bank moved its entire workforce onto centrally-managed PKI two-factor authentication with MyID CMS, integrating through the Lifecycle API and reusing its existing Microsoft certificate authorities, HSMs and in-house card printing. Credentials are issued, replaced and revoked from one auditable platform across branches in multiple countries.
Is your email already in criminal hands?
Check your email against the world's largest breach database containing over 11 Billion breached credentials. Enter a work email to find out instantly.
in our database
involve stolen credentials*
and contain a breach**
* 88% of web application attacks involve stolen credentials - Verizon's 2025 DBIR
** 241 days average time to identify and contain a breach - IBM's Cost of a Data Breach Report 2025.
Check an Email Address
See if this address appears in any confirmed data breach across our database of over 11 billion stolen credentials.