Yes, you can recreate the old ID for the new device and deactivate the ID for the lost device.
For this you must have activated the recreation function. For detailed instructions please see our detailed information.

Yes, that’s possible.

Visit our website to learn more about how to integrate SecSign ID into your website.

There is no limit. You can use it for any number of devices. For more information please see our website.

Yes. You can duplicate your ID by using the recreation function. For more information please see our website.

Yes. You can duplicate your ID by using the recreation function. For more information please see our website.

By verifying the access pass you make sure that you’re authenticating the sign-in you have initiated.

You can test the login function on secsign.com or portal.secsign.com.

Start the sign-in on the website entering the user short name of your SecSign ID. An access pass will be shown.

Tap on the SecSign ID on your iPhone.
Enter your passcode and tap on the access pass which is shown on the website.

You can either use a numeric passcode or an alphanumeric password.
A numeric passcode allows quick and easy input via the number keypad.
The passcode must contain at least 4 digits or characters.

The passcode protects your SecSign ID.

Nobody else who finds your iPhone unlocked can use your ID without the passcode.

The user short name is the unique name of your SecSign ID. You must choose a name which is used by nobody else. The name must contain a minimum of 4 characters. You can also use your Email address as user short name.

You sign up using your iPhone. Tap on the plus sign in the right corner of the navigation bar. Enter your user short name and passcode and your SecSign ID will be created for you.

• Tap on the plus button on your iPhone to create your SecSign ID.
• Choose a user short name (nickname) for your ID.
• Choose a passcode to protect your ID.
• Go to secsign.com on your computer and enter your user short name.
• Tap on your ID on your iPhone and enter your passcode.
• Last step: Tap on the correct access pass on your iPhone.

There are no costs to deploy the cloud-based version of SecSign ID for your website or web service. Our plug-ins are free regardless of the number of users that you may serve. For your users, the SecSign ID app and its use with any corresponding web services is free.

Yes, just as SecSign ID can be integrated easily with web services by using our simple plugins, our technology can be integrated with our web-based solutions such as SaaS software products. If you are interested in licensing SecSign ID for distribution as part of your software product, please visit our Contact Us page to submit an inquiry.

Yes, it is possible to acquire your own SecSign ID server and deploy SecSign Portal on your own infrastructure. We offer on-premises solutions with full installation support so you can enjoy the convenience and control of having SecSign’s advanced cryptography and powerful solutions on your own servers. Please visit our On-premises Solutions page to learn more about deploying SecSign solutions on your own servers.

In contrast to other solutions the SecSign ID on-premise setup is truly on-premise. There is no connection to any outside server, no data are ever transmitted or stored outside your premises. You do not need an external internet connection to authenticate with the SecSign ID app if you have the on-premise setup.

For most developers, integration will be extremely simple, either through entry of basic Java or PHP code, or by using our simple plugins, which can be easily integrated into several popular CMS solutions. Please visit our Plugins page for downloads, tutorials, and more information.

No. The session and user management remain the same and they remain fully under the control of the developer. The developer needs only to integrate an additional authentication process via the SecSign ID server. This requires the additional entry of code for the SecSign ID login. Developers can view sample Java or PHP codes on our website, or they can use any of our available plugins for WordPress or Joomla. Please visit our Plugins page for downloads, tutorials, and more information.

We possess an infrastructure with complex replication mechanisms that are spread over several data centers.

The client, such as Java or the PHP API, is configured with two server names for two SecSign ID servers. The client always sends its request to the first server, and if the first server is not available, the second server will take over after a defined timeout period.
Both SecSign ID servers use the same database, which is replicated in two availability zones. This guarantees that, in case of an outage, there will be an automatic switch-over to the second entity.

The SecSign ID app is free. To try the free app, you can download it from the iTunes store or from Google Play.

As an additional bonus, all SecSign ID users automatically receive free access to SecSign Portal, which offers secure file sharing, file storage, and messaging. Users receive up to 5GB of encrypted file storage with their SecSign ID account. Users can access SecSign Portal at portal.secsign.com.

We earn revenue by selling on-premises security solutions for organizations that want to have the security and features of SecSign ID and SecSign Portal on their own servers, but with the control and convenience of an on-site installation. Since many organizations prefer to manage their own data and user authentication process, and since many prefer to keep their confidential information on their own servers, we deliver our on-premises solutions with full installation support. We also offer custom branding and the flexibility to connect SecSign ID and SecSign Portal with various services, servers, and devices within organizations.

Yes. We believe strongly in making our two-factor authentication solution and our advanced cryptography available for free in the cloud. We feel that the best way to demonstrate the superiority of our security and the simplicity of our authentication process is to allow anyone to install and use the cloud-based version of SecSign ID for free.
For those who are seeking an on-premises solution to deploy SecSign ID authentication on their own servers, we offer enterprise installations at a cost that is affordable for businesses and other organizations. We also offer on-premises installations of our secure file sharing, file storage, and messaging solution, SecSign Portal.

Since a private key is stored on your mobile device and you must verify the presence of that key and the possession of your device to authenticate your user ID, a simply 4-digit PIN can be used for verification and to protect your key. The PIN or passcode is only needed to protect against unauthorized access by anyone in your immediate vicinity or in case your mobile device is lost or stolen.

Someone attempting to compromise your ID would have to gain physical access to your mobile device in order to authenticate, but without the knowledge of your 4-digit PIN or your alphanumeric passcode, the attacker has no way to complete authentication. Even if an attacker attempts to guess your PIN or passcode, your ID is automatically locked after a limited number of failed authentication attempts.

Moreover, our patent-pending SafeKey mechanism provides additional protection for the private key on your mobile device. Even if an attacker could get possession of your device and somehow crack the operating system’s encryption, the SafeKey mechanism provides a final layer of security that prevents brute force access to the private key.

Yes. Both SecSign ID and SecSign Portal can be purchased and installed on-premises with a full, independent installation of our technology and cryptography on your servers. Our software is platform-independent, so you can use your current data center hardware to deploy our solutions. You can even customize your installations with your own branding.
Full installation support is available from our qualified security engineers, and our SecSign ID app is already equipped to be configured for use with your own servers. We have over 14 years of experience in selling and installing our server solutions in large, enterprise environments.

We have a number of critical reasons for not using QR codes, all of which center around delivering the best possible security with more simplicity and convenience for the user.

• The SecSign ID procedure is faster than those that use QR codes.
• It also saves time and frustration for users who may have difficulty with successfully scanning a QR code.
• With our simplified authentication process, you can authenticate your login by merely tapping buttons on your mobile device. This offers an easy solution for users who prefer to avoid complexity in the authentication process. This is a critical factor in enterprise environments, where obstacles must be removed to encourage user adoption and consistent use of secure authentication methods.
• Since SecSign ID uses a push button authentication method, bad lighting conditions such as bright sunlight reflecting on your device or dim lighting from a darkened room cannot prevent a successful authentication. SecSign ID reliably avoids these common problems for scanning QR codes.
• Skilled attackers can generate unlimited QR codes in order to flood and block servers. With large services enjoyed by many users, this kind of sophisticated attack can be difficult to distinguish from a huge number of highly welcome, legitimate users. But SecSign ID prevents these types of attacks. With SecSign ID, an attacker must know an active user name in order to attempt an authentication, and any user name can easily be blocked without affecting any other SecSign ID.
• By using a visual access symbol as opposed to a QR code, you can use SecSign ID to grant remote access to services, even if a user doesn’t have the SecSign ID app or a mobile device. For example, if you want to grant temporary, “guest” access to a secure service or to an SecSign Portal folder or file, you can create a SecSign ID specifically for this purpose. When you want to grant access, you can ask a remote user to enter the user name through a browser and confirm the access symbol that the user sees in the browser. You can then use your mobile device to complete the authentication and log the user into your service. You can log the user out once there is no longer a need to grant access, and you have complete control over accessibility and an ability to review the history of any logins with that account.
• By avoiding the need to scan QR codes, SecSign ID can be used more discreetly and without disruptions, such as authenticating during a business meeting or while traveling on a train or airplane.
• Theoretically, SecSign access pass symbols could be described out loud to visually impaired users, thus enabling secure authentication for those who would be unable to use a QR code.

SecSign ID can be easily integrated with web-based services to provide two-factor authentication and next-generation security for user accounts, but any integration with private, third party services is a decision that must be made by the developers of those solutions. If you would like to see SecSign ID integrated with a private, third party service, please consider contacting the developer and also contacting us to see if we can help.

Yes. SecSign ID was designed to accommodate multiple IDs and to provide a better alternative to other services that only allow one ID and cannot support differing needs for personal or business use. Every SecSign ID user can create and use up to three IDs for free. And, if you have a need for additional IDs, you can purchase a premium account. We offer three free IDs for each user, 20 IDs with our Pro plan, and an unlimited number with our Enterprise plan.

Yes. We offer three free IDs for each user, plus premium plans. You can get 20 IDs with our Pro plan and an unlimited number of IDs with our Enterprise plan. Our extensive use of this option within our own company is a good example of the convenience and flexibility we can offer.

For example, we have an internal ID called “Quality Assurance” that shares its SecSign Portal inbox with all of our quality officers.
Another ID is called “Vacation Planning”, and every colleague sends his vacation schedule to this ID. A further ID is called “Controlling”, and our servers use this ID to share statistical performance data. The possibilities are endless, and we are planning more features for “special-purpose IDs” in the future.

Yes. You can use SecSign ID to grant remote access to services, even if a user doesn’t have the SecSign ID app or a mobile device. For example, if you want to grant temporary, “guest” access to a secure online conference, you can create a SecSign ID specifically for this purpose. When you want to grant access to that account, you can ask a remote user to enter the user name through a browser and confirm the access symbol that he or she sees in the browser. You can then use your mobile device to complete the authentication and log the user into the conference. You can log the user out once the conference is completed, and you have complete control over accessibility and an ability to review the history of any logins with that account.

This same option can be applied to many different needs for controlled, remote access, such as:

• Securely exchanging files or granting access to a service during an online call or chat
• Providing secure access to a service or files during or after a telephone conversation
• Securely sharing personal information without also sharing email addresses or using email
• Granting temporary access to files or services for external business partners like accountants, attorneys, agencies, or other service providers
• Any other circumstance in which you might want to react quickly and share critical information that must be kept confidential and completely secure.

The access symbols are designed to provide a final verification of your ID during our authentication process. But the presentation of four different symbols is designed to require the user to be attentive to the symbols and not merely push a button out of routine. The need to select the correct access symbol among the available options adds an additional layer of security.

There are several reasons why this may occur. Two of the most common reasons are described below.

The link you released has expired. To protect your data, Portal links have a validation period, or time limit, that you can set when you create the shared link. You can check this limit by going to Release Control in the Portal, finding your shared link, and viewing its validation period. If you verify that the link has expired, simply go to the file or folder that you want to share and create a new link.

If you want to allow external users more time to access your link, you can extend the validation period. To do this for an existing link, go to the link’s options and click on “Change Protection Settings”. Then go to the “Retention Period” and select your desired time period. Pro plan users of SecSign Portal can select a period between 4 hours and 28 days.

Another common cause of link access issues is that you have a free Portal account and you have reached the limit of three other users who use your secured link. With a Pro plan from SecSign Portal, you can create links that allow an unlimited number of users to access them. Or, with the Free plan, you can create a new link to allow another three users to access your data. The limits to the Free plan are designed to prevent illegal file sharing and to protect you from unauthorized sharing of your links. However, if you need to allow larger numbers of users to access your links, the Pro plan is available and can be used for this purpose.

When you log into the Portal, the user interface will indicate whether you have any new messages or invitations awaiting your attention. Also, you can enable automatic email notifications of messages, invitations, acceptance of shared files or folders, and new uploads to shared directories. To do this, simply add an email address to your Portal profile. Once your profile contains a valid email address, you will begin to receive notifications about these events through your email account. If you only want to receive notifications for certain types of events, go to the Profile menu of SecSign Portal and click on the Notification Center. This will allow you to check or uncheck the boxes to enable or disable notifications for specific events such as messages, sharing invitations, accepted sharing, and uploads to shared folders.

Yes. We have premium plans available with up to 100 GB of storage for our Pro plan and unlimited storage for our Enterprise accounts. For more information, visit our SecSign Portal Plans and Pricing page. If you would like to sign up for a premium plan, please visit our Contact page or email us directly at sales@secsign.com.

Yes, we provide premium accounts for teams and full enterprise operations. For more information, please visit our SecSign Portal Plans and Pricing page. If you have any further questions or would like to sign up for a premium plan, please visit our Contact page or feel free to email us directly at sales@secsign.com.

If the server locked your ID due to too many authentication failures, you can unlock your ID by generating a new key pair. Open your SecSign ID app and go to “Edit” in iOS or tap the pencil icon on the Android app. Then tap on your ID to open the editing screen. There, you can unlock your account, and you should select “Create New Key Pair” in order to generate a new key pair for the unlocking. IMPORTANT: Make sure that you will be able to successfully authenticate in order to create a new key pair. After a defined number of authentication failures during the generation of the key pair, the ID will be locked irretrievably for security reasons.

If you have any additional problems with a locked ID, please contact us at support@secsign.com

You can first deactivate your SecSign ID and then reactivate it. Important: For this you must have activated the recreation function before the loss of PIN or passcode. Learn how to reset your ID.

Someone else may have initiated a sign-in for your SecSign ID – Maybe due to a typo.
You can unlock your account by tapping on your ID and proceed as usual.
If the problem continues a Priority Code will be displayed which you can use on the website instead of your user ID.

You can duplicate your ID by using the recreation function. For more information please see our information about SecSign ID Duplication.

With an activated recreation function you are able to reactivate your ID for a new device and to deactivate the ID on the lost/stolen device. So, after the recreation of your ID, please make sure to deactivate the ID on your old device. You can deactivate the ID either via the admin page or the device list in your app on your new phone. All required steps are described under here.

It is possible to activate this function manually later on, see SecSign ID Restoration.

During your sixth login after the creation of your ID you will receive an automatic request to activate the function. If you wish, you will be guided immediately through the necessary steps. SecSign ID Restoration (PDF)

Restoration means that you are able to recreate your ID, for example, when you lost your device or your PIN. The following page explains the necessary steps for activating this function.

You can use this function also in order to duplicate you ID in order to use it on several different devices.

In case your device was stolen or lost and you got a new device, you will be able to recreate the old ID for the new device and to deactivate the ID for the lost device.
For this you must have activated the recreation function before the loss. For detailed instructions please see the detailed information.

This may happen if another user with a similar user name mistypes an ID when attempting a login. If you suspect that this is the case, you can ignore the request and it will time out after several minutes. Or you can open the associated SecSign ID in your mobile app, enter your PIN, and then tap on the question mark icon in the lower right of your screen. Tap “deny” on the subsequent screen to cancel the authentication request.

If you’ve accidentally initiated an authentication session or perhaps started logging into the wrong service and want to cancel the login, there are two methods to cancel it. If you are still on the website for the service that you began to log into, simply click on the “X” button at the top right of your browser screen and this will cancel the authentication.
Also, you can open the associated SecSign ID in your mobile app, enter your PIN, and then tap on the question mark icon in the lower right of your screen. Tap “deny” on the following screen to cancel the authentication request.

If you have made too many failed authentication attempts and your SecSign ID has been locked, you will need to generate a new key pair after unlocking your ID. You will not be able to use your unlocked ID without completing this step.
A new key pair is generated during the duplication of your old ID for a new device by using the recreation function.

If the maker of your device’s operating system has announced major security vulnerabilities and has issued an update to fix them, and this gives you any reason to believe that someone may have attempted to gain access to your ID with your current key, you should also generate a new key pair.

If the server locked your ID due to too many authentication failures, you can unlock your ID by generating a new key pair. Open your SecSign ID app and go to “Edit” in iOS or tap the pencil icon on the Android app. Then tap on your ID to open the editing screen. There, you can unlock your account, and you should select “Create New Key Pair” in order to generate a new key pair for the unlocking. IMPORTANT: Make sure that you will be able to successfully authenticate in order to create a new key pair. After a defined number of authentication failures during the generation of the key pair, the ID will be locked irretrievably for security reasons.

If you have any additional problems with a locked ID, please contact us at support@secsign.com

Someone else may have initiated a sign-in for your SecSign ID – Maybe due to a typo.
You can reject that sign-in by tapping on the question mark in the bottom right corner and then tapping on “Reject”.

Please visit our Support page and request assistance by using our Support contact form. Or, you can email us directly at support@secsign.com.

You can first deactivate your SecSign ID and then reactivate it. Important: For this you must have activated the recreation function before the loss of PIN or passcode. Learn how to reset your ID here.