Phishing resistant
Nothing to hand
to a fake site.
Credentials never travel over the network, and a signature is only valid for the genuine origin. FIDO is resistant to phishing by design.
FIDO Universal Server Certified · UAF / U2F / FIDO2
A world without passwords, built into your service.
Quado is a FIDO Alliance certified FIDO authentication server package. Deploy it in your own environment, on-premises or in the cloud, and bring passwordless authentication, including passkeys, to your users.
How FIDO sign-in works
ANIMATION
Device
private key
Browser / App
WebAuthn
Your system
REST API
Quado
public key
The private key never leaves the device and never travels over the network.
FIDO AllianceMember
Universal ServerPassed all UAF, U2F and FIDO2 tests
- U2F
U2F110020190424002- UAF
UAF110020190424003- FIDO2
FIDO20020190424001
Why FIDO
Simpler, stronger authentication that doesn't rely on passwords
FIDO authentication is built on public-key cryptography. The server holds only the public key; the private key never leaves the user's device. That structure alone removes the problems inherent to password authentication. Passkeys, now being adopted across the industry, are built on this same FIDO (FIDO2 / WebAuthn) foundation.
Nothing to hand
No shared secrets
Nothing on the server
worth stealing.
The server stores no passwords or shared secrets. Even if server data were leaked, it could not be used to impersonate a user.
Faster sign-in
Nothing for users
to remember.
A fingerprint, a face, or a security key: intuitive actions that free users from remembering, typing and resetting passwords.
Product
What is Quado?
Quado is an authentication server package for adding passkey and FIDO authentication (passwordless and biometric sign-in) to your online services.
It fully conforms to the international standard protocols defined by the FIDO Alliance (FIDO2 / UAF / U2F) and holds FIDO Universal Server certification. It can be deployed in your on-premises environment or on any major cloud, and operated according to your own policies and infrastructure, giving you passwordless authentication on your terms.
As a FIDO Alliance member, we also provide consulting and development support for FIDO adoption alongside the package itself.
- FIDO certificationsUAF · U2F · FIDO2All three certifications held
- APIs to integrateRegister and authenticateJust two REST API calls
- Personal data on the serverNoneOnly identifiers and public keys
Spec
Specifications
Everything you need for an evaluation, on one sheet.
- Certification
- FIDO Universal Server FIDO Universal Server certification, awarded for passing every UAF, U2F and FIDO2 conformance test. An authentication platform built on international standards.
- Protocols
- FIDO2 (WebAuthn / CTAP) · UAF · U2F Passkey-based web authentication (FIDO2 / WebAuthn), biometric authentication in mobile apps (UAF) and security-key two-factor authentication (U2F), all handled by a single server.
- Deployment
- On-premises · AWS · Azure · GCP Runs in your own data center or on any major cloud. Whatever the environment, it can be operated in the configuration that suits you best.
- Data held by the server
- User identifiers (such as UUIDs) and public keys only No personal data, such as email addresses or biometric information, is stored on the server.
- API
-
REST API — two families:
registerandauthenticateA minimal FIDO integration needs only these two APIs, which keeps integration with existing systems straightforward. - Administration
- Web admin console included View API statistics, change server settings and manage users from the browser.
- Scaling
- From test environments to large-scale production Supports redundant configurations. In cloud environments, cloud-native scaling is also available.
Process
How adoption works
Three steps to passwordless authentication.
-
1
Discovery and requirements
We learn about your environment and requirements and propose the best configuration: on-premises or cloud, the authentication flows, and how to integrate with your existing systems.
-
2
Setup and deployment
We deploy Quado in your environment, set up the admin console, issue API keys and complete the basic configuration so it is ready to use.
-
3
API integration and go-live
You integrate the REST API into your application and go live. We provide documentation and sample code and support you through the integration.
Use cases
Where Quado is used
- FinanceStronger identity verification for online banking and payment services
- HealthcareSecure access control for electronic medical records and health information systems
- E-commerceAuthentication at sign-in and checkout for online stores
- EnterprisePasswordless single sign-on for internal systems and VPNs
Pricing
Plans
We offer plans to match your scale and requirements. Contact us for details.
Standard
For evaluation and small deployments
- FIDO2 / UAF / U2F support
- Admin console
- REST API
- Standard support (email)
Enterprise
For large-scale, high-availability requirements
- Everything in Standard
- Redundant configuration support
- Deployment and development support
- Priority support
FAQ
Frequently asked questions
Does Quado support passkeys?
Yes. Passkeys are credentials based on the FIDO2 / WebAuthn standards. As a FIDO2 certified server, Quado supports passkey registration and authentication (with biometric or PIN user verification) in WebAuthn-capable browsers and operating systems.
How long does deployment take?
It depends on your environment and requirements, but a test environment can be ready in as little as a few days, and a production rollout typically takes one to two months. We propose a schedule based on how Quado needs to integrate with your existing systems.
Can it coexist with our existing authentication?
Yes. Because Quado works through a REST API, it can be introduced gradually alongside existing ID/password or multi-factor authentication. From a full migration to a partial rollout, you can proceed at your own pace.
Which devices and browsers are supported?
Major browsers that support FIDO2/WebAuthn (Chrome, Safari, Firefox, Edge) and mobile devices (iOS, Android). UAF-based authentication in mobile apps and U2F security keys are also supported.
What support is available?
The Standard plan includes standard support by email. The Enterprise plan adds priority support, plus deployment consulting and development support.
How is Quado licensed?
Licensing is tailored to your scale and requirements. Please contact us for details.
Contact
Let's start
with a conversation.
Questions about adopting FIDO authentication? Get in touch. We're happy to walk you through the product, propose a configuration or prepare a quote, and a member of our team will reply.
- Product walkthroughs and quotes
- Integration with existing systems
- On-premises / cloud configuration proposals
Company
Company
- Name
- Quado, Inc.
- Business
- Development and sales of FIDO authentication products
FIDO adoption consulting - Representative Directors
- Wataru Doi, Fumito Inoue
- Head office
- 2F, 2-2-15 Hamamatsucho, Minato-ku, Tokyo, Japan
- Membership
- FIDO Alliance
- Certification
- FIDO Universal Server
U2F110020190424002UAF110020190424003FIDO20020190424001