WatchGuard Identity Security

Identity Is Where Security Starts

Start Demo

WatchGuard AuthPoint Identity Security screens on desktop and mobile devices

Why WatchGuard Identity Security

red fingerprint swirl

Block phishing and credential attacks with multi-factor and passwordless authentication

rocket ship going upwards

Deploy identity protection in minutes. One console, multi-tenant from day one

red gear inside black circle made of arrows

Scale your security practice with identity integrated across the WatchGuard platform

Protect Identities at Every Stage

Today's identity-based attacks defeat traditional MFA. WatchGuard Identity Security blocks credential theft, account takeover, and MFA fatigue with phishing-resistant passkeys and zero trust policies, all from one cloud console. It scales with Dark Web Credential Monitoring and integrates across the WatchGuard platform for defense in depth.

AuthPoint MFA

Multi-factor authentication with push notifications, passkeys, and zero trust policies to verify every identity across desktop logon, VPNs, and cloud applications.

Learn More

Total Identity Security

All the power of AuthPoint MFA plus Dark Web Credential Monitoring to secure every login and detect exposed credentials before they are exploited.

Learn More

Hardware Token

Hardware Tokens are an alternative for users or environments where personal mobile devices aren't permitted or available.

Learn More

This form requires the Marketo script to function properly.

How to allow Marketo

One Console. All Your Users. Ready in Minutes.

Let us show you how AuthPoint protects workforce access, VPNs, and Microsoft environments from a single console.

 
 
 
 

Choose Your Level of Identity Protection

AuthPoint MFA secures every login. Total Identity Security adds Dark Web Credential Monitoring to detect exposed credentials before they are exploited. See what each includes.

WatchGuard Product AuthPoint MFA Total Identity Security
Push / QR / OTP Authentication ✓ ✓
Device DNA ✓ ✓
FIDO2 Passkeys (phishing-resistant) ✓ ✓
SSO Application Portal ✓ ✓
Hardware Tokens ✓ ✓
External MFA for Microsoft Entra ID
(previously External Authentication Methods)		 ✓ ✓
ThreatSync Credential Access ✓ ✓
WatchGuard Cloud Management ✓ ✓
Dark Web Credential Monitoring ✓
 

More Than MFA. A Complete Identity Layer.

WatchGuard AuthPoint isn't a standalone tool. It's the identity layer of our Unified Security Platform that also covers your network and endpoints, all managed from a single multi-client console. That means stronger protection at lower cost and with less complexity.

WatchGuard AuthPoint login screen on an open laptop

Traditional MFA methods like push notifications and one-time passcodes can be intercepted by advanced phishing attacks in real time. FIDO2 passkeys, a form of phishing-resistant MFA, are cryptographically bound to the legitimate domain, so fake login pages cannot capture credentials.

MFA fatigue spams users with approval requests until one is accidentally accepted. Adversary-in-the-middle attacks intercept push or OTP codes in real time. AuthPoint blocks both: ThreatSync detects push abuse and blocks tokens automatically, and FIDO2 passkeys are cryptographically bound to the legitimate domain.

No. WatchGuard Identity Security runs on WatchGuard Cloud and is independent of Microsoft Entra ID licensing. You can use MFA, passkeys, Zero Trust policies, and SSO regardless of your customers' Microsoft 365 plan. Only the External MFA integration with Entra ID requires Entra ID P1 or higher.

WatchGuard Identity Security is part of the WatchGuard Unified Security Platform alongside Network Security, Endpoint Security, Zero Trust Bundle, and ThreatSync XDR. All products share the same WatchGuard Cloud console, so MSPs and businesses correlate identity, network, and endpoint signals without managing separate vendors.

Yes. WatchGuard Identity Security aligns with NIST SP 800-63-4 on authenticator assurance levels. FIDO2 passkeys deliver AAL2 protection, and hardware-bound passkeys via YubiKey meet AAL3 for privileged users. Cyber insurance carriers increasingly require phishing-resistant MFA, and WatchGuard helps meet that requirement.
More Resources