It's fairly easy to build passwordless scheme. 1. Service picks asymmetric scheme (RSA, ECDSA, etc.) 2. User generates public/private pair of keys locally 3.

It's fairly easy to build passwordless scheme. 1. Service picks asymmetric scheme (RSA, ECDSA, etc.) 2. User generates public/private pair of keys locally 3. User registers its public key in the service 4. Now user can sign anything thus confirming its identity No third-party service required. Users have to keep their private keys locally, but BeyondIdentity also requires this. I don't feel their complicated scheme has much sense. Also they've mentioned the use of machine learning, this looks even more strange.