TokenOne

TokenOne is a cybersecurity software company headquartered in Sydney, Australia, focused on identity theft prevention through a patented authentication technology. The company develops and markets an authentication system built on One-Time Pad principles, a cryptographic method historically recognized for its theoretical unbreakability. The core product is a Two-Factor Authentication (2FA) solution that uses a combination of smart device identification and Zero Knowledge Password Proof (ZKPP). Unlike conventional authentication systems where a user enters a password or PIN to prove knowledge of it, TokenOne's approach allows a user to prove knowledge of their PIN without ever transmitting or revealing it — not even to TokenOne itself or the service being accessed. This is achieved by mentally scrambling the PIN on-device, meaning the actual PIN is never entered into any system. The two authentication factors consist of: (1) a knowledge factor — the user's secret PIN, which is never revealed; and (2) a possession factor — the user's registered smart device, which serves as a unique token. Both factors are described as independently strong, differentiating it from many common 2FA implementations where one factor is considered weak. TokenOne targets organizations that require secure access to sensitive systems such as deal rooms, client portals, corporate records, and critical infrastructure. The solution is designed to address both security and scalability simultaneously, allowing large-scale deployment without sacrificing authentication strength. It also aims to assist organizations in meeting identity proofing and legal compliance requirements. The technology is a registered trademark in both Australia and the United States.