PortalGuard Desktop is an MFA solution that secures login and unlock processes for Windows and Mac operating systems, including desktops and servers. It operates at the OS level, enforcing multi-factor authentication at the point of login, screen unlock, and remote access sessions. The product supports a range of authentication methods including security questions, SMS OTP, email OTP, TOTP-based mobile authenticator apps, push notifications, FIDO2/WebAuthn hardware tokens, fingerprint-based biometrics via BIO-key's WEB-key platform, BIO-key MobileAuth biometric app, and integrated device-based biometrics such as Windows Hello, Touch ID, and Face ID. PortalGuard Desktop includes self-service password reset (SSPR) capabilities that allow users to manage credential recovery without IT intervention, reducing helpdesk call volume. The SSPR interface is consistent with the browser-based PortalGuard experience to minimize user training requirements. The product supports offline authentication through fingerprint scanning and TOTP authenticator apps. It can be deployed on Windows servers to enforce MFA for console-based access via hypervisors and remote access via RDP. It also supports shared/roving workstation environments common in healthcare, banking, retail, manufacturing, hospitality, and contact centers. Target use cases include shared workstations, IT server and infrastructure access, remote user access, and cyber insurance compliance requirements.