Tidas: a new service for building password-less apps
Summary: Trail of Bits released Tidas, an SDK drop-in for iOS apps that replaces passwords with a fingerprint touch, generating a unique encryption key stored in the iOS Secure Enclave and protected by Touch ID. Signing in produces a digitally signed session token that the app's backend passes to the Tidas backend for identity verification, and Tidas says it stores no sensitive data outside the mobile device.
Why it matters: Tidas is free until March 31st with no billing and no usage limits, and its design claim is that a breach of the Tidas backend or your own servers would yield no passwords and no personally identifying information because the keys never leave the Secure Enclave.
Read the original at Trail of Bits Blog ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026