SecurEnvoy, a provider of tokenless authentication solutions, has announced SecurPassword, a solution which enables Microsoft Windows domain users to reset their passwords. SecurPassword is designed to allow users to reset their Windows domain password using tokenless, two-factor authentication.
With SecurPassword, a six-digit, one-time passcode is sent to the user’s mobile phone via SMS. No software is required to be deployed at the user’s end. This would significantly benefit the banking, BPO, KPO and IT segment by providing them with security through a dual authentication method.
“SecurPassword is a solution, which allows resetting of passwords using a technology, which is mobile phone and mobile operator independent,” says Nitin Kathuria, director - Operations and Strategy, Lancers e-Risk Solutions. The approach counters any SMS delays or intermittent signal problems. The solution supports any GSM or CDMA mobile phone. No software is required on the phones and the passcodes are received within a fraction of a second.
With SecurPassword, users are no longer dependent on the administration or helpdesks as it is a self service reset process and this solution can also help companies in significantly reducing the number of calls placed to corporate helpdesks and decrease user wait times, in turn increasing profitability in enterprise environments.
The solution includes everything an enterprise needs to roll out a complete two-factor authentication service, including unlimited users and authentications. Users, who have forgotten their password, must simply enter their Windows logon ID into a dedicated website, enter their PIN or answer a configurable security question and then enter the passcode from their phone. Once successfully authenticated, one can create a new password.
Enterprise security can be improved with SecurPassword because password changes are provided directly to the end user without other individuals being involved. Password resetting allows authorised users to quickly and securely change their own passwords, which eliminates the need for users to make a call to the helpdesk or reveal verification details over the phone.