What is two-factor authentication?
Two-factor authentication uses more than one authentication test, usually a password paired with another authentication method.
Top Rated Authentication Products
These products won a Top Rated award for having excellent customer satisfaction ratings. The list is based purely on reviews; there is no paid placement, and analyst opinions do not influence the rankings. Read more about the Top Rated criteria.
Authentication Systems TrustMap
TrustMaps are two-dimensional charts that compare products based on trScore and research frequency by prospective buyers. Products must have 10 or more ratings to appear on this TrustMap.
Authentication Systems Overview
What are Authentication Systems?
Authentication systems are security measures put in place to secure data and systems by requiring additional input beyond username and password for users to access a system. By providing this additional input, authentication systems help ensure that users are who they say they are. Authentication systems can require one other form of user input or more. These systems are sometimes called multiple-factor authentication, or MFA.
Using authentication improves data security and prevents potential breaches. When multi-factor authentication is required to access a system, the system is less vulnerable to security issues like weak passwords or attacks like phishing. Authentication systems are ideal for businesses with sensitive data or systems that require secure user accounts.
Authentication System Features & Capabilities
Authentication Systems have different ways of authenticating users, but they all share a few key features.
Enable multiple-factor authentication
Secure systems against password theft or data loss
Offline authentication
Secure single sign-on
User management
Multi-Factor Authentication Solution Methods
Most modern authentication systems offer a wider range of authentication methods than passwords alone. The most common approach for advanced authentication, such as two-factor authentication or multi-factor authentication, is to pair a password with some sort of external verification. Other common authentication methods include:
Challenge questions
Unique identifying items, such as physical devices or external applications
Biometric identifies, such as retina and fingerprint scans or facial recognition
Location-based authentication
Authentication System Comparison
When comparing different authentication systems, consider these factors:
Authentication methods: What authentication methods do each system offer? Some authentication products focus on password creation and management, while others provide external applications for MFA. Others offer physical devices, such as keycards or retinal scanners. Buyers should consider which authentication methods are most appropriate for their business.
Active vs. passive authentication: Some vendors have been more proactive in adopting responsive authentication capabilities, such as behavioral analysis or location-based authentication. These capabilities provide additional visibility into possible security breaches and suspicious authentication attempts, allowing for more rapid and effective responses. However, smaller or more geographically-distributed organizations may not be able to make as effective use of these extended capabilities.
End-user experience: Each authentication method bears a unique user experience and is more or less accessible than others. For instance, biometric authentication like fingerprints may not be viable or appropriate in certain environments. Other methods require end users to have personal devices, which may not be true for all users. Buyers should consider what the end user base will look like, and what implications that has on which methods to use.
Pricing Information
Pricing for authentication systems depends on the kind of authentication needed. App-based and SMS authentication services tend to be cheaper than biometric authentication or authentication that requires a physical passkey. Many authentication systems offer a free option for a small number of users. Beyond that, authentication systems can start as low as $1.00 per user per month. More fully-featured authentication systems can reach $10.00 per user per month or more.
Authentication Products
(1-25 of 86) Sorted by Most Reviews
The Okta Identity Cloud
Customer Verified
Top Rated
TRUE
Starting Price $2
Okta is an enterprise grade identity management service, built in the cloud. IT can manage access across any application, person or device. Whether the people are employees, partners or customers or whether the applications are in the cloud, on premises or on a mobile device, Okta…
LastPass for Business
Customer Verified
Top Rated
LastPass, a LogMeIn company, is a password management application to simplify access to enterprise applications for users but also increase centrality and ease of management of access for administrators with task automation, convenient and secure password sharing, and other features.…
HID DigitalPersona (formerly Crossmatch)
Customer Verified
TRUE
HID DigitalPersona (formerly Crossmatch) provides a comprehensive multi-factor authentication solution. The vendor’s value proposition is that their solution frees users from cumbersome login activities while making it easy for an IT Team to secure access to their networks, data…
Duo Security
Customer Verified
Top Rated
Cisco Multi-Factor Authentication, based on Duo Security, is a two-factor authentication system (2FA), acquired by Cisco in October 2018. It provides single sign-on (SSO) and endpoint visibility, as well as access controls and policy controlled adaptive authentication.
WatchGuard AuthPoint
Customer Verified
Top Rated
TRUE
WatchGuard AuthPoint is a multi-factor authentication (MFA) service that helps companies keep their assets, information, and user identities secure. Multi-factor authentication solutions can enable organizations to close security gaps that leave companies vulnerable to breaches by…
Idaptive Next-Gen Access Services, which was acquired by CyberArk in 2020, secures enterprise identities against cyberthreats that target today’s hybrid IT environment of cloud, mobile and on-premises. Idaptive helps protect against the leading point of attack used in data breaches…
Auth0
Customer Verified
Auth0 is an identity management platform for developers and application teams. It gives users a platform to authenticate and authorize, providing secure access to applications, devices, and users. Auth0 aims to provide the simplicity, extensibility, and expertise to scale and protect…
Azure Active Directory
Top Rated
Microsoft Azure Active Directory (Azure AD) is a cloud-based identity and access management (IAM) solution supporting restricted access to applications with Azure Multi-Factor Authentication (MFA) built-in, single sign-on (SSO), B2B collaboration controls, self-service password, and…
The RSA SecurID Suite is an identity management, authentication and user provisioning offering supported by EMC's security division, RSA. The SecurID Suite includes SecurID Access 2FA and multi-factor authentication solutions and RSA Identity Governance & Lifecycle products.
Symantec Validation and ID Protection Service (VIP) is presented as a user-friendly, cloud-based strong authentication service that enables enterprises to secure access to networks and applications without impacting productivity. Also included with VIP Enterprise two-factor authentication…
Amazon Cognito is a mobile identity product that allows users to add user sign-up and sign-in to mobile and web apps, and authenticate users through social identity providers.
IBM Cloud App ID helps developers who are not security experts to easily add authentication to their apps, and protect their APIs and app back-ends running on IBM Cloud. Developers can add a variety of login-in types: Email or username and passwordEnterpriseSocial App ID includes…
SolarWinds Access Rights Manager (ARM) is designed to assist IT and security admins to quickly and easily provision, deprovision, manage and audit user access rights to systems, data, and files. By analyzing user authorizations and access permission you get visualization of who has…
The Ping Intelligent Identity Platform from Ping Identity in Denver, Colorado is an identity management and access solution (IAM) for enterprises. Features of the products include single sign-on, multi-factor authentication, user management with directory, provisioning and deprovisioning.…
OneSpan's authentication suite (formerly Digipass authenticators) are available in software or hardware forms to secure data and high security areas. The Digipass line of products are by OneSpan (formerly Vasco Data Security) in Illinois.
Workspace ONE Access, (formerly VMware Identity Manager), provides multi-factor authentication, conditional access and single sign-on to SaaS, web and native mobile apps.
Microsoft's Azure Multi-Factor Authentication is the recently rebranded technology acquired with PhoneFactor in 2012. From 2018 it is no longer available as a standalone product.
STEALTHbits Technologies offers StealthINTERCEPT, an evolution of STEALTHBITS Enterprise Password Enforcer supporting high security password creation, the ability to detect and prevent the creation of previously exploited passwords, rejection of user log in credentials, and other…
Transmit Security headquartered in Boston offers their identity orchestration solution, providing strong customer authentication and authorization for entities that need it.
GateKeeper Enterprise by Untethered Labs is automated password management, authentication, and auditing. It is designed so that IT admins can eliminate password and authentication problems with hands-free computer and website access through proximity-based 2FA. Instead of authenticating…
Frequently Asked Questions
How is authentication done in computers?
Traditionally, digital authentication was via a password. In recent decades, multi-factor authentication has added other checks, such as key cards or one-time passwords from external devices, for additional security.
What is the difference between two-factor authentication and multi-factor authentication?
Two-factor authentication only uses 2 authentication checks, usually a password and another method. MFA uses 2 or more authentication methods, with each additional method designed to increase security.
What are the three types of authentication?
The three types of authentication are something that you know (a password, or challenge questions), something you have (like a key card, device, or external application), and something that you are (such as retina scans, fingerprints, or other biometric information).
How much does authentication software cost?
Costs vary depending on the scale and types of authentication being purchased. They can start as low as $1/user/month, up to $10/user/month, or more if authentication hardware like retinal scanners are required as well.