Identity

OneSpan Acquires Nok Nok Labs to Expand FIDO-Based Passwordless Authentication

Password protection concept

OneSpan has acquired Nok Nok Labs, a move that brings new momentum to its vision for flexible, standards-based authentication. The acquisition deepens OneSpan’s investment in FIDO (Fast Identity Online) authentication, bolstering its ability to support customers navigating the shift away from passwords.

Nok Nok Labs is widely recognized for its role in developing and advancing the FIDO authentication standard. As a founding member of the FIDO Alliance, the company has built a strong track record helping enterprises implement passwordless login experiences using UAF and FIDO2 protocols. Its platform is designed for seamless deployment across digital channels, meeting a broad set of regulatory and operational needs.

Broader Portfolio with Support for Software and Hardware Authentication

By integrating Nok Nok’s technology, OneSpan expands its authentication portfolio to offer both software- and hardware-based options across on-premises and cloud environments.

"OneSpan now offers the most comprehensive authentication portfolio in the industry, allowing our customers maximum choice and flexibility. With Nok Nok’s innovation and depth in FIDO combined with OneSpan's maturity in deploying large scale authentication solutions creates a great synergy," Ashish Jain, Chief Technology Officer at OneSpan told MSSP Alert.

The combined offering includes Digipass, FIDO2 security keys, Cronto transaction signing, and now, Nok Nok’s authentication platform, all aligned to support a range of identity security needs. "OneSpan already has a very broad range of authentication capabilities and deployment options," says Jain.

Flexible Deployment Across Diverse Environments

One Span offers both on-premises and cloud offerings that support various authenticators, including mobile authentication apps, mobile SDKs, Digipass OTP, Cronto, FIDO2, etc. Now, with the acquisition, "the addition of Nok Nok’s FIDO-based platform significantly expands OneSpan’s server-side options with software FIDO capabilities that allow flexible configuration and management of authenticators," emphasized Jain.

Meeting the Needs of Regulated and High-Risk Industries

For enterprise and banking customers, the move signals increased flexibility in implementing phishing-resistant authentication solutions. It also aligns with rising demand for passwordless models that reduce friction while maintaining compliance and high assurance.

For clients in regulated sectors like finance and healthcare where strong customer authentication must meet strict compliance standards while resisting phishing and account takeover attempts, OneSpan brings decades of experience. The company has supported high-risk environments for over 30 years, protecting customers across more than 1,000 financial institutions in over 100 countries. As account takeover threats grow more sophisticated, OneSpan has invested in next-generation authentication technologies that leverage FIDO’s phishing-resistant capabilities.

“With the Nok Nok acquisition, we enhance and accelerate our innovation in this direction, immediately adding new software FIDO capabilities to our existing solutions, which will help our customers reach their cybersecurity objectives and ultimately drive down cyber fraud," Jain notes.

Enabling MSSPs with Broader Identity Security Options

The integration of OneSpan and Nok Nok’s technologies also brings a broader range of FIDO-based authentication options to managed security service providers (MSSPs) looking to strengthen their identity and access control offerings.

For many organizations, the shift to passwordless authentication is complex due to the variety of applications and legacy systems in place. MSSPs can now leverage the combined solution to offer more adaptable and standards-based authentication strategies tailored to different client environments. Jain notes, “With the widest range of options now supported by a combined solution of OneSpan and Nok Nok, it is easier to find a fit for any use case or application, be that new or legacy, to have an MFA option.”

An In-Depth Guide to Identity

Get essential knowledge and practical strategies to fortify your identity security.
Suparna Chawla Bhasin

Suparna serves as Senior Managing Editor for CyberRisk Alliance’s Channel Brands, including MSSP Alert and ChannelE2E.  She plays a key role in content development, optimizing editorial workflows, aligning storytelling with audience needs, and collaborating across teams to deliver timely, high-impact content. Her background spans technology, media, and education, and she brings a unique blend of strategic thinking, creativity, and executional excellence to every project.

You can skip this ad in 5 seconds