Product — Dapple Authenticator

Phishing-resistant MFA. No passwords, no hardware keys.

Hackers don’t break in — they log in. Dapple Authenticator replaces passwords and phishable MFA codes with software passkeys derived from a live biometric, delivering FIDO2 phishing resistance at a price every business can afford.

Book a Demo See Pricing
How it works

Enroll once. Nothing stored. Sign in anywhere.

Dapple turns your biometric into cryptographic passkeys on demand. The biometric itself never leaves the moment — it is never written to a device, a server, or a database.

Enroll once

A user enrolls with a quick biometric scan on any supported device. No hardware token to provision, no seed phrase, no password to set.

Keys derived on demand

At each login, the live biometric regenerates the user’s private key in the moment. The key material exists only during authentication.

Phishing-resistant sign-in

Authentication follows FIDO2 standards — cryptographically bound to the real site, so fake login pages, MFA-fatigue prompts, and code-stealing kits simply don’t work.

Recover without tickets

Lost or new device? The user re-derives their keys from their biometric — self-service, in minutes, with no helpdesk reset and no security questions.

Built for administrators

Multi-tenant administration for the people who run it

  • Multi-tenant admin portal — manage every client organization from one pane of glass, built for MSP and MSSP operations.
  • Fast deployment — integrates with Microsoft Entra ID, Google Workspace, and major SSO providers. No rip-and-replace.
  • Self-service recovery — biometric re-enrollment eliminates the #1 helpdesk ticket category: credential resets.
  • Cyber-insurance ready — satisfies the phishing-resistant MFA requirements showing up in renewal questionnaires.
  • Works offline-first — no dependency on a biometric cloud lookup, because there is nothing to look up.
Dapple Authenticator app screenshots
The admin side

One portal, every tenant

admin.dapplesecurity.com Dapple Admin Tenants Policies Enrollment Reports Billing Client organizations + Add tenant TENANT USERS ENROLLED STATUS Front Range Accounting64100%Healthy Summit Legal Group3197%Healthy Aspen Dental Partners11888%Enrolling Boulder Creek Realty42100%Healthy Pikes Peak Manufacturing20593%Healthy Dapple Verified — you're in
Why not just buy hardware keys?

Hardware-key security, software-key economics

Dapple software passkeysHardware security keysCode-based MFA apps
Phishing-resistant (FIDO2)YesYesNo — codes can be phished
Per-user hardware to buy & shipNone$25–$75 per key, plus sparesNone
Lost credential recoverySelf-service biometricReplace & re-ship the keyHelpdesk reset
Biometric data storedNeverN/AN/A
MFA-fatigue attacksImmuneImmuneVulnerable
Full comparison: Dapple vs. hardware keys →
FAQ

Questions buyers actually ask

 

Is my fingerprint or face stored anywhere?
No. Dapple never stores biometric data — not on our servers, not on your employer’s servers, and not in a recoverable form on the device. Your biometric is used in the moment to derive cryptographic keys, and then it’s gone. There is no biometric database to breach.
What happens if my biometrics change — a cut finger, glasses, aging?
Dapple’s enrollment captures enough signal to tolerate normal day-to-day variation, and users can enroll more than one biometric factor. If a biometric changes dramatically, re-enrollment takes minutes and is verified through your organization’s standard identity checks.
What if I lose my device?
Nothing sensitive is on it. Your keys aren’t stored on the device — they’re derived from you. Sign in on a new device by re-enrolling with your biometric; the old device holds nothing an attacker can extract or reuse.
Does this satisfy cyber-insurance MFA requirements?
Yes. Dapple provides phishing-resistant, FIDO2-standards-based MFA — the strongest MFA category insurers recognize, and increasingly the category they require for coverage of email, remote access, and privileged accounts.
Do we have to rip out our SSO or identity provider?
No. Dapple layers onto Microsoft Entra ID, Google Workspace, and major SSO/IdP platforms as a phishing-resistant authentication method. Your directory, groups, and app assignments stay exactly where they are.
How is this different from the passkeys built into my phone?
Platform passkeys are synced copies of stored keys — tied to one vendor’s ecosystem and to cloud-account recovery flows. Dapple passkeys aren’t stored at all: they’re regenerated from your biometric on demand, work across ecosystems, and give businesses centralized management platform passkeys lack.

See it in action.

Twenty minutes, your environment, your questions answered.

Scroll to Top