Yoti blog

Stories and insights from the world of digital identity

Introducing Yoti Password Manager

Introducing Yoti Password Manager

It’s safe to say that most of us are fed up with usernames and passwords. We know we should use stronger, unique passwords. It’s just that it’s not that easy to remember 14 random numbers and letters, is it. It’s hard enough to remember the variants you have of the one password you use for most of your accounts and websites, let alone a unique password for each one.   The problem with passwords Good job then, that passwords are as rubbish as we are at remembering them. Passwords just aren’t adequate for protecting our online accounts anymore. The number of recent data breaches is testament to that. In 2017, 122 data records were stolen every single second (Breach Level Index, 2017). It’s clear that what the world needs is a modern solution that makes life easier for the average person, but harder for fraudsters. Well, look no further. Introducing: Yoti’s password manager—where you are your password.   Managing your passwords with Yoti When you use Yoti to safely store and easily access your logins for your favourite sites, you are in full control of your data. There’s no master password to remember; using your biometrics to access and make use of an encrypted store of all your usernames and passwords makes signing in faster, safer and simpler. It even helps you generate unique, strong passwords for even better protection.   Here’s how it works: Download the free Yoti app for Android or iOS, if you don’t already have it. Download the password manager extension to your computer for Chrome or Firefox. Once installed, you’ll see an icon in the top right hand corner of your browser. Click this icon to display a Yoti QR code. Scan the code with the Yoti app on your phone and that’s it—you’re ready to go. Simply log in to websites on your computer as normal and Yoti will offer to store your details and fill them in for you every time you visit. There’s no need to remember passwords anymore—Yoti does it for you. When you step away from your computer, simply lock the Yoti extension with a click (or the extension will automatically lock after 15 minutes of inactivity), so that someone using your laptop or computer can’t see your passwords. If someone else attempts to unlock the extension, you’ll receive a notification on your phone. Tapping ‘Cancel’ on the notification will deny access, keeping the browser extension locked. To unlock the extension again just click the ‘Unlock’ button in the browser extension. You’ll then receive a push notification on your phone to unlock your passwords. When you’re done browsing, remember to sign out of the extension and all your logins will remain secured and encrypted. You can sign in to the extension again at any time by scanning the code using your Yoti app.   Keeping your details safe Security is absolutely key with everything we do at Yoti—our password manager is no exception. We take security seriously and always put the safety of your personal data first. With our password manager, we’ve developed a password management tool with Yoti security embedded throughout.   Multiple users with different logins on the same PC or Mac With our password manager, you simply need to install the browser extension and then anyone who uses it can access their secure logins with their own Yoti. This means you can have a family laptop with the Yoti extension installed but anybody with Yoti can access their own logins. This means Yoti could also be used on public or shared devices in the workspace, whilst keeping all of your personal passwords and accounts secure. No master password Unlike other password managers, ours doesn’t rely on a master password to secure all of your passwords. As we said, passwords are no longer adequate for protecting our information. Our password manager is connected to your Yoti account so the only way to access and use your passwords is by using the Yoti app on your phone.   Locked passwords Once you have finished on the laptop or computer you were using, you can lock the password manager. So, if someone then uses the same computer after you, they won’t have access to any of your passwords. Once you sign out of the password manager, no data is left on the laptop or computer you were using. You can walk away safe in the knowledge that there is nothing for anyone to find. The only way to unlock and use your login details is with your Yoti account.   Linked to your Yoti account All details are encrypted, and the only way to decrypt them is with your Yoti. If someone else got hold of your phone, firstly they would have to gain access to the phone (either by guessing your phone’s PIN or possessing your fingerprint). They would then need to log in to your Yoti app—with a limited number of attempts at the PIN before they’re locked out.   This is the first version of our password manager. It’s available on Google Chrome and Mozilla Firefox but we’re working on bringing it to other browsers soon. If you’d like to be notified when it’s available for other browsers, leave your email here and we’ll let you know. And the best news? It’s free! If you have any questions about our password manager, please get in touch.

5 min read
Yoti accepted into the FCA Sandbox

Yoti accepted into the FCA Sandbox

Yesterday the FCA revealed the next round of successful firms in its regulatory sandbox. We’re proud and excited to say that Yoti is one of those companies, along with Barclays, Nationwide, First Direct and Solidi, to name a few. The FCA Sandbox allows firms to test innovative products, services or business models in a live market environment, while ensuring appropriate protections are in place. It’s a fantastic way to encourage innovation in financial services.   Yoti’s involvement in the sandbox We will be using the sandbox to test consumer’s appetite for our innovative form of KYC, which lets people prove their identity via our digital identity app. Individuals can prove their identity in seconds without having to rely on paper documents, and financial services companies can benefit from fast and accurate KYC, as well as save time and money when verifying the identities of their customers. Every Yoti account is linked to a government-issued identity document and personal biometrics so businesses can be confident the details shared with them are real. When an individual shares their information using Yoti, they see which identity details are being requested and give their consent to share them. They also receive a digital receipt so they can easily keep track of who they have shared details with. Some businesses still believe they need to see an actual image of the identity document to be compliant. We want to demonstrate a data minimisation approach to KYC, encouraging firms to only request the details they actually need from their customers, which is both compliant and better for individuals. If you’d like to know more about our involvement with the FCA Sandbox, please get in touch.

2 min read
In the Spotlight with Leo, Growth and Partnerships Executive at Yoti

In the Spotlight with Leo, Growth and Partnerships Executive at Yoti

Last week we released our “Little Casanova” video which highlights the potential pitfalls of not knowing who you’re meeting, and the ease at which someone can create a fake profile online and pretend to be someone else. We caught up with Leo, Growth and Partnerships Executive at Yoti, who explains how you can use Yoti to check the identity of people you meet.   Yoti can be used to check the identity of another person, why would I need to do that? Meeting new people is a part of everyday life. The problem is, we often need to trust these people without knowing anything about them. This is especially true of dealing with people over the internet. Think, for example, about renting someone else’s property or chatting on a dating site. Moving your life into someone else’s home or arranging to meet a stranger in a bar requires a lot of trust. Yet all you have to go by is an online profile which that person has created for themselves. The same applies to the offline world. You could be meeting someone to buy or sell items advertised on a classifieds site or even welcoming tradesmen into your home. Again you have to take their word that they are who they say they are. Most of the time these sorts of interactions happen with no issue. The problem is, when they go wrong, the impact for the victim can be devastating. We’ve heard the stories of people getting ‘catfished’ on dating sites, scammed by people renting nonexistent homes or buying items from someone online only to never receive them. Serious crimes are sometimes committed as a result of cases like these. At Yoti, we recognise that meeting new people, both online and offline, can create anxiety and risks. It’s one of the reasons why we’ve developed a simple solution to let people check each other’s verified identities. It helps people meet and transact with greater peace of mind.   How much does Yoti cost and how long does it take to check someone’s details? Yoti is free for individuals and an account takes just minutes to create. Once created, you can start exchanging identity details with other people right away. The exchanging of details itself is also very quick.   How do I check someone’s details? You can use Yoti to exchange details in three different ways: Request details: lets you request specific identity details from someone else. Swap details: lets you specify which of your personal details you want to show to someone, in order to see their equivalent details in return. Send details: lets you send your identity details to someone else. After choosing which details to exchange and who with, you decide whether to share them via SMS, email, Whatsapp, or in person.   What details can I see about someone else? It’s up to you to choose. You decide which details you want to request, send or swap. These can include: first name, last name, photo, age, gender, nationality, address, phone number and email address. When you swap details with another person, you receive the same information from them. But remember: just because you requested to see someone’s details, doesn’t mean they’ll accept. At Yoti we believe people should always decide who to share their details with and when to share them. All these details have been previously verified by Yoti, so you can be confident the details shared with you are real.   How long does it take to check their details? Once you have sent a request, you just need to wait for the other person to accept. Once that person has accepted, the details are exchanged instantly. The details of the other person are then available to see in your Yoti app. Assuming most people check their phone several times a day, it shouldn’t take more than 24 hours for the other person to accept or reject your request.   Surely I could just look at their social media profile to find out more about them? You can, and in fact it might be useful to do that sometimes. But the problem is, you can never be sure that the details on social media accounts are real. Details on social media profiles aren’t verified, meaning someone can easily create a fake profile. Yoti verifies every identity detail of the person behind the profile, so checking who someone is with Yoti will always be safer and more reliable than checking social media profiles.   How do I know their details are real? Each Yoti account is securely built and verified using a government issued document, like a passport or driving licence, and personal biometrics. We also have a dedicated verification team working 24/7 to prevent the use of fake and fraudulent documents being used to set up Yoti accounts. Without going into too much detail, these are the main verification steps we take before approving an account: selfie matching: we ask users to take a picture of themselves, and we compare this photo to the one on their identity document. video test: we ask users to repeat randomly generated words. This helps us confirm that the user is a real person and isn’t trying to spoof the system with someone else’s picture. document upload: we ask users to add one of their identity documents, like a passport or driving licence. document verification: our professionally trained team ensures each document is genuine.   Will it not be awkward to ask another person to prove who they are? If you explain your request, then it shouldn’t be awkward. You can also personalise the message you send with every request, for example if you were going to buy a car from someone you could say: “Hi Joe, before we finalise the transaction could we please use Yoti to complete an identity check?” It gives both people peace of mind and confidence.   In one sentence, why should I download the app? Get your ID on your phone and always know who you’re dealing with!   What’s the one thing about Yoti you’re most passionate about? I’m really excited about Yoti’s ambitious vision: to become the world’s trusted identity system. The fact that Yoti could be used in so many different life situations makes it a very interesting project to work on. Yoti has the potential to be used in every context where people need to prove who they are. You could use Yoti to enter a nightclub instead of carrying an ID document, to check the identity of someone you’ve met on a dating site, to prove your identity to a recruitment company, or as an alternative to usernames and passwords. Lastly, I like the fact that we have put data privacy at the heart of our principles. We treat people’s personal details respectfully. Our system is built so that we can’t see people’s details, meaning we can’t sell their data on or track how they are using the app. If you have any other questions for Leo, please get in touch.

7 min read
Yoti is helping to make everybody good2rent

Yoti is helping to make everybody good2rent

Renting a property has long been the norm, especially amongst Millennials. But tenants are facing fierce competition when it comes to securing their dream rental home and many are losing out. A huge contributing factor to this situation is the existing prolonged ID & referencing system. Something Yoti has enabled good2rent to make faster, easier and safer. good2rent is a tenant-led referencing solution for the digital age that puts renters back in control. Tenants use Yoti, a digital identity app, to easily ID themselves so they can then start building their renting profile. Their good2rent profile includes previous landlord & employer references, credit check, affordability statement, and of course Yoti verified nationality & ID. Tenants can then share this verified profile as many times as they wish with the letting agents & landlords during their house hunt.   Building a Good2rent reference profile with Yoti We accept passports from over 140 countries worldwide, which means both UK and international tenants can create their Yoti. They can then get ahead of the competition by building and sharing their good2rent reference profile when booking a viewing. good2rent referencing is held in a tenant’s secure vault and is fully portable and built year on year, enabling the tenant to prove a true history of good tenancy. Letting agents and landlords will also save both time and money by ensuring tenants are matched in advance to the right properties for them, ensuring no unsuitable tenants are viewing properties. The Yoti ID element of good2rent also gives letting agents & landlords the added security of knowing who they will be showing around a property. You can find more information at www.good2rent.co.uk Gone are the days of the hassle, expense and repetitive paperwork of traditional referencing. In its place is a digital, portable, new way to rent that is easy, fast and fair. Empowering tenants, letting agents and landlords with every move.

2 min read
NSPCC & Yoti working together to help keep children safe online

NSPCC & Yoti working together to help keep children safe online

At Yoti, we’re committed to using our identity checking system as a force for good. We’re a B Corporation with a set of principles to guide us and a Guardian Council of respected and influential individuals to hold us to account. We’ve also made our platform free-of-charge for individuals and charities to use. We know that to really understand how our platform might be put to use to help solve local and global problems, we need to work with experts. So in February this year, we held a hack event to explore the challenges charities face checking ID and see how we might be able to help.   The NSPCC hack Lizzie and Jen from NSPCC arrived at the hack with a very specific challenge. NSPCC’s Childline had partnered with the Internet Watch Foundation to provide a route for young people to report for removal sexually explicit images of themselves on the internet. However, for the IWF to remove the image, you first need to prove you’re under 18. Back then, that involved asking the young person to send a scan of their passport, which they worried put people off submitting the removal request. Through the hack week, Lizzie and Jen worked with graduate developers from our partners, the Founders and Coders bootcamp, to thrash-out a basic design for an app to enable young people to prove their age and complete the removal request form in a smooth, anonymous online flow. They pitched their idea to a panel of Yoti staff and founders, who are passionate about online safety for children. They were instantly taken with the potential of the idea, and awarded a prize of a month of developer time to build the idea to a working prototype. We were thrilled when, a month of development and some user-testing later, NSPCC said they’d like to go live with a fully functioning version of the app. The pilot app is now live. Young people can use the tool on desktop computers and on their mobile phones to quickly and simply prove they’re under 18 years old and submit a request to remove the image that’s causing them distress. Positive collaboration We were so happy to help NSPCC with this impactful use case, and look forward to completing more projects like this. If you’re a charity with challenges in checking people’s ID, please get in touch.

3 min read
Using Yoti at cinemas

Using Yoti at cinemas

We all enjoy a trip to the cinema, but carrying a government issued ID to confirm we’re old enough to see our chosen flick isn’t so convenient – especially when we’re going to sit and slouch in a dark room where important documents could easily be lost or stolen. Obtaining a trusted and accepted form of ID can also be tricky for younger viewers – unless they carry a passport that parents may be reluctant to let them take out the house. We asked young people whether they liked the idea of using Yoti, a digital ID, to prove their age on their phone and lots of them did. They are keen to have an easier and quicker way of proving their age in their everyday life, so we decided to test Yoti out at a cinema. We are currently trialling Yoti at the Watershed cinema in Bristol and would love you to try it. As long as you’re under 24 and old enough to see your chosen movie, simply verify you are under 24 using Yoti at Watershed, Bristol and your cinema ticket will be free! To get involved, just download the Yoti app for Apple or Android, get your passport and / or driving licence ready and follow the simple setup process – all that’s left is to pick your film and sit back, relax and enjoy the movie. Feedback on the trial has been great from both the cinema and public so please let us know there is a particular cinema you’d like us to come to next! Download Yoti now!

2 min read

Essential reading

Get up to speed on what kind of company we are