Device-bound security keys
Approvals use hardware security keys enrolled in person by your staff, not passwords or codes that can be shared. Device-bound keys only. Synced passkeys aren’t accepted.
Security
How VerifiedKnock protects recoveries and approvals, at a high level.
Two-person approval
A help-desk recovery needs two staff approvals, each with their own key, before anything changes.
Your staff decide
VerifiedKnock confirms that the enrolled person’s key was used. It never approves, releases or dispenses on its own.
One-time recovery passes
A recovery pass is issued only after both approvals and is shown once, on the employee’s own screen.
Full audit trail
Every check and approval is recorded so your team can review what happened and who approved it.
Least-privilege integrations
The Microsoft Entra ID connection asks only for the permissions the help desk needs, granted by your administrator.
Report a vulnerability
Email security@verifiedknock.com. Please don’t include real user data or secrets. See also our Privacy Policy and the Microsoft Entra setup guide for the exact permissions requested.
Ready to pilot?
Book a 30-minute call. We’ll walk through your use case and set up a pilot.