Access control for organizations that can't afford a back door.
Policing and defense hold some of the most sensitive data there is. With My1Login, the keys that unlock your stored credentials never leave your network, so nobody outside it can read them, including us, and every access to every system is on record.
- Keys that never leave your network
- A non-repudiable record of every access
- Every system, from cloud to bespoke
| Where | Holds the keys | Can read them |
|---|---|---|
| Your network | Yes | Your authorized users only |
| My1Login service | No | No |
| Any other party | No | No |
The stakes are higher, and so is the bar for proof.
Forces and defense organizations are targets for criminals and hostile states alike, run a mix of modern and bespoke systems, and must be able to show exactly who accessed what.
Vendors who hold your keys
Most identity vendors can access the keys that protect your stored credentials, which is a potential back door outside your control.
What it leads to: risk you can't audit, sitting with a third party.
Systems old and new
Cloud services sit alongside bespoke, virtualized and Windows desktop systems that modern single sign-on doesn't reach.
What it leads to: separate passwords, written down or reused.
Proving who did what
Investigations, disclosure and professional standards depend on knowing exactly who accessed which system, and when.
What it leads to: gaps where shared and generic accounts are used.
Control and a complete record, without a back door.
My1Login takes the passwords for every type of system out of users' hands and puts your organization back in control.
Keys stay with you
Credentials are encrypted inside your network with keys only you hold. My1Login stores data it cannot read.
Every system covered
Single sign-on for cloud, on-premise, Windows desktop, bespoke and virtualized applications.
Non-repudiation of access
Every access to every system is recorded against a named person, including shared and privileged accounts.
Controls that support your legal and security obligations.
Law enforcement processing and defense work come with specific duties on security and logging.
| Framework | What it expects of access | How My1Login helps |
|---|---|---|
| Data Protection Act 2018, Part 3 (law enforcement processing) | Appropriate security for personal data, and logs of processing in automated systems, including who consulted or disclosed data and when. | A record of every sign-in to every system, by named person and time, including shared accounts, to support your logging duties. |
| Cyber Essentials Plus | Often a requirement in defense supply chains: user access control, strong authentication and admin rights kept separate. | Unique, strong, hidden passwords and MFA on the systems that need it. Password policies enforced on every account. |
| Cyber Assessment Framework (CAF) | Objective B2: identity and access control, with privileged access managed and reviewed. | Shared and privileged accounts released only to the right people, for the right time, with every use logged. |
| ISO/IEC 27001 (yours) | Controls over who can access what, how they authenticate, and a record of access. | Governance of access to every system and a full audit trail, as evidence for your own certification. |
Built for the most sensitive environments.
Everything below works across web, cloud and Windows desktop systems.
Zero-knowledge encryption
The keys stay inside your network. Nobody outside it can read your stored credentials, including us.
Non-repudiation
Every access recorded against a named person, ready for investigations and disclosure.
Shared and privileged accounts
Release shared accounts to the right people, for set times, without revealing the password.
Step-up per system
Require an extra check before someone opens your most sensitive systems.
Bespoke and virtualized apps
Single sign-on for Windows desktop, bespoke and virtualized applications, with no API needed.
One-time codes, generated and filled
Authenticator codes generated and filled in, so there is nothing to share or intercept.
Leavers, in one step
Remove someone from the directory and their access to every system goes with them.
UK company since 2007
Headquartered in London, and trusted by policing and defense organizations.
Policing and defense questions
Can My1Login, or anyone who asks My1Login, read our credentials?
No. Credentials are encrypted inside your network with keys only you hold, so the My1Login service stores data it cannot read, and has nothing it could hand over.
Does it work with bespoke and virtualized systems?
Yes. My1Login provides single sign-on for cloud, on-premise, Windows desktop, bespoke and virtualized applications, with no API required.
Can shared accounts be tied to a named person?
Yes. People use a shared account without seeing its password, and every use is recorded against the person who used it.
Can we name you as a supplier?
Only with your agreement. We never name a policing or defense customer, or say what we do for them, without their permission.
See zero-knowledge encryption working in a 5-minute demo.
We'll show you where the keys live, what My1Login can and can't see, and the record of every access.
- 5 minutes, on your own apps
- A specialist replies within one working day
- No obligation