- Platform
- Vouched Assure
- Re-authentication
Vouched Assure: re-authentication
Confirm it’s still them, later.
People come back after months away, share devices and hand over phones. Vouched Assure re-authenticates returning users with a live selfie matched to the identity they enrolled with, so continuity never costs you assurance.
Why it matters
Time changes who’s holding the device.
A saved password or a long-lived session proves something was set up once, not who is using it now.
Accounts go dormant
Dormant accounts are attractive targets, and their owners may not notice anything is wrong.
ransom Colonial Pipeline paid in 2021 after attackers signed in through a VPN account that was no longer in use and had no multi-factor authentication, shutting down the largest fuel pipeline in the U.S.
Source: Bloomberg via Al Jazeera, June 2021Devices change hands
Shared, sold or stolen devices carry saved sessions and credentials with them.
was all thieves needed to take over a stolen iPhone’s accounts, a Wall Street Journal investigation found. Apple responded with Stolen Device Protection, which requires Face ID or Touch ID before sensitive actions.
Source: NBC News, 2024Some access needs a fresh check
Records, payments and personal details deserve to know it’s still the owner today.
people affected after attackers signed into a Change Healthcare remote access portal with stolen credentials and no second check, in the largest U.S. medical data breach on record.
Source: UnitedHealth via CyberInsider, 2025How it works
Welcome them back, with confidence.
A returning user
Your rules spot a return after inactivity, or a request for sensitive access.
A live selfie
A quick check on the device they’re using, guided so it works the first time.
Liveness and match
Vouched confirms a live person and matches them to their enrolled identity.
Access continues
Verified, they carry on. Review or rejected, your flow decides what comes next.
What you get
Continuity without re-enrollment.
No starting over
Returning users re-prove against the identity they already established.
Liveness on every selfie
Photos, screens, recordings and deepfakes can’t stand in for the owner.
You set the triggers
Inactivity windows, sensitive pages or risky actions, defined by your rules.
Any device
Works on phones and computers, with a branded desktop-to-phone handoff.
Your brand
White-labeled in 15 built-in languages.
Every check recorded
Each decision comes with the checks behind it, for your audit trail.
Where it’s used
Built for the industries fraudsters target first.
FAQ
Re-authentication, answered.
Straight answers about re-authentication with Vouched Assure.
Contact us with a questionWhat is re-authentication?
Re-authentication confirms that a returning user is still the same person, for example after a period of inactivity or before access to sensitive information, rather than relying on a saved password or an old session.
How is re-authentication different from step-up MFA?
Step-up adds a stronger check at a high-risk action, such as a large transaction. Re-authentication confirms the person when they return, for example after months away or before sensitive access. Both re-prove against the same enrolled identity.
How does Vouched re-authenticate a user?
The person takes a live selfie that’s checked for liveness and matched to the identity they established at enrollment with Vouched Verify.
Do returning users have to enroll again?
No. They re-prove against the identity they already established, so there’s no repeat onboarding.
Why should dormant or returning accounts be re-verified?
Because credentials and sessions outlive the person’s attention to them. Attackers got into Colonial Pipeline in 2021 through a VPN account that was no longer in use and had no multi-factor authentication, and the company paid a $4.4 million ransom. Re-authentication confirms it’s still the owner before an old account or sensitive access is used again.
When should re-authentication be triggered?
When your rules say so: after a set period of inactivity, on a new device, or before access to sensitive records, payments or personal details.
What if the selfie doesn’t match?
Vouched returns a review or rejected decision with the checks behind it, and your flow decides what happens next.
Can re-authentication be white-labeled?
Yes. Colors, fonts, copy and images match your product, in 15 built-in languages.
How do I get started?
Talk to sales to set up re-authentication for returning users in your product.