Passwordless Authentication and Onboarding Built on Decentralized IDs

Block-Auth is an identity and authentication company based in Madrid, selling passwordless login and user onboarding to regulated businesses. Its argument is that removing shared secrets from the authentication flow removes the root cause of most identity-related breaches, citing the share of incidents traced to leaked credential data. Named target sectors include fintech and bank account opening, gaming and gambling registration, Web3, insurance policy management, and e-commerce, where fraud and age verification are recurring requirements.

The platform replaces passwords with decentralised identifiers, so the credential sits with the user rather than in a provider's database. It also acts as a layer above existing identity providers, standardising registration and login across Microsoft accounts, Google, and digital wallets, so an application integrates once instead of separately per provider. For blockchain use cases it can anchor identity records on chain, which is where onboarding and verification steps produce a durable, auditable trail.

Compliance framing runs through the product: flows are positioned against GDPR, eIDAS, the NIS Directive, and PSD2, which matters most to the European fintech, insurance, and gambling operators the company targets, where onboarding must satisfy both fraud controls and identity assurance rules. Verification, age checks, and fraud prevention are treated as stages of one onboarding path rather than separate purchases, which is the main case Block-Auth makes against stitching together point solutions.