Book a demo
Zero trust security

Zero trust starts with identity: verify every access, to every app.

"Never trust, always verify" only works if you can see and control access to every app, not just the modern ones. My1Login puts every app behind your directory, adds step-up checks where the risk is higher, limits access by time, and records every decision.

Book a 5-minute demoHow it works
  • Every app behind your directory
  • Step-up checks for sensitive apps
  • Least privilege, by person and time
What S. Kerr seesOne quick check, then payroll opens.

Trusted by organisations including

  • Mainspring logo
  • Natural Power logo
  • ELEXON logo
  • Azets
  • London Central & West Unscheduled Care Collaborative logo
  • Ribby Hall Village logo

Identity is the new perimeter. Make sure it covers everything.

A trusted inside and untrusted outside no longer fits cloud apps and hybrid work. Zero trust moves the check to every access.

Perimeter security

  • Trust anyone on the network
  • The same access whatever the risk
  • Standing access that never expires
  • Passwords users can share or reuse
  • Gaps in the record of who did what

With My1Login

  • Verify every access, from anywhere
  • Step-up checks for sensitive apps
  • Access limited by date and time
  • Passwords hidden and filled in
  • Every access recorded
How it works

The identity foundations of zero trust.

Each of these is a principle of zero trust, applied to every app, not just the ones with modern sign-in.

  1. Verify explicitly

    Every app sits behind your directory sign-in, with MFA or step-up checks where the app is sensitive.

  2. Least privilege

    People get only the apps they need, and shared and privileged access only when they need it.

  3. Assume breach

    Hidden passwords mean a stolen device or phishing email yields nothing usable, and leavers lose access everywhere.

  4. See everything

    One record of every access decision, across web, cloud and Windows desktop apps.

  • 10,000+users rolled out at once at MainspringRead the story
  • ~600apps found and integrated at Natural PowerRead the story
  • 100%adoption, guaranteed
  • Since 2007protecting organisations worldwide
Built in

Zero trust controls for every app.

Everything below works across web, cloud and Windows desktop apps.

  • Step-up per app

    Ask for an extra check before your most sensitive apps open.

  • Access by date and time

    Release access only between set dates, on set days or in working hours.

  • Passwords nobody sees

    Nothing for a phishing page to collect, and nothing for a leaver to take away.

  • Shared accounts

    Use a shared login without seeing its password, with every use logged.

  • Leavers, in one step

    Remove someone from the directory and their access to every app goes with them.

  • Shadow IT found

    Sign-ins to apps IT didn't know about are spotted and brought under the same rules.

  • A record of every access

    Who opened which app, and when, across web, cloud and desktop.

  • Zero-knowledge encryption

    The keys stay inside your network. Nobody outside it can read your stored passwords, including us.

The products behind it.

Each one shares the same directory connection, policies and audit trail.

Further reading

Further reading

Zero trust questions

Is My1Login a complete zero trust solution?

Zero trust covers identity, devices, networks and data. My1Login provides the identity and access foundations: verifying every access to every app, least privilege, step-up checks and a full audit trail.

Can we require extra checks for sensitive apps only?

Yes. Set step-up and MFA policies per app, so routine apps open quickly and sensitive ones ask for more.

Does it replace Microsoft Entra ID or Active Directory?

No. Your directory stays as it is. Signing in to it signs your workforce in to My1Login, which extends single sign-on to the apps your directory can't reach: password-only apps, apps that ask for one-time codes, and Windows desktop software.

Can My1Login see our passwords?

No. With zero-knowledge encryption the keys are only available inside your organisation's network, so nobody outside it can read your stored passwords, including My1Login.

See zero trust applied to your oldest app in a 5-minute demo.

We'll put a step-up check in front of it, limit it by time and show you the record of every decision.

  • 5 minutes, on your own apps
  • A specialist replies within one working day
  • No obligation
Book a 5-minute demoStart a 14-day free trialThe full product, on your own apps.
Book a 5-minute demoFree trial