Add passkeys and adaptive MFA to AWS Cognito. Without migrating off it.

Authsignal drops in on top of your AWS Cognito user pools via Lambda triggers. Ship phishing-resistant passkeys, a no-code rules engine, and pre-built UI. Live in weeks, not months.

Book a call View docs

Delivering world-class results for:

Amazon Cognito vs. Authsignal + Amazon Cognito

Capability

Amazon Cognito alone

Authsignal + Amazon Cognito

Passkey Support

Passkeys work out of the box only in managed login. On your own UI you handle the WebAuthn steps yourself

Embedded passkeys anywhere in your app. Pre-built UI or SDKs for web and native mobile.

MFA Options

TOTP, SMS, email OTP. Passwordless and passkey options need Essentials or Plus

+ Push, WhatsApp OTP, biometrics, magic links, authenticator apps

Adaptive Authentication

Risk-based adaptive authentication only on the Plus tier, formerly sold as Advanced Security Features

Visual no-code rules engine. Deploy adaptive policies in minutes, not sprints

Policy Configuration

Lambda triggers and custom code for any non-standard flow

No-code visual builder. Product, fraud, and compliance teams configure directly

Customization & UX

Basic UI customisation on managed login page

Fully brandable pre-built UI, or embed via SDKs into your existing application

Implementation

Requires complex implementation and WebAuthn protocol handling outside managed login

Lambda trigger integration. Pre-built UI or headless SDKs. Live in weeks

Fastest way to integrate MFA and passkeys with Amazon Cognito

Ship passkeys and adaptive MFA without re-architecting your Cognito user pools

Replace Lambda-based custom auth flows with a visual rules engine, with no custom code required

Phishing-resistant authentication live in weeks, with pre-built UI or your own custom implementation

From daunting rebuild to shipped in weeks

Drop-in

Rebuilding authentication in-house can be daunting.

The cost and complexity shouldn't hold your business back.

SECURITY

Stay focused on what you do best. Trust Authsignal for authentication.

Enable passkeys and MFA in weeks, not months — with a visual rules builder and secure user journeys out of the box.

JOURNEY

Authentication across the entire customer journey

Passkeys at sign-in. Step-up at transaction. Verification at account recovery. Authsignal orchestrates authentication at every sensitive touchpoint, not just the login screen, all from a single integration.

3 ways to integrate with AWS Cognito

Get started for free with up to 2000 monthly active users.

“Implementing FIDO authentication through Authsignal has been a game-changer for our members’ digital experience. It’s secure, seamless and sets a new standard for trust in online banking.”

Herb Wulff

Treasury and Agency

Treasury and Agency Banking Manager

Partnering with Authsignal is simple and powerful

Start today, no cost

Enable passkeys and MFA in weeks, not months — with a visual rules builder and secure user journeys out of the box.

Quick & easy integration

Integration made easy: Follow our step-by-step guides to get up and running without friction.

Expert support anytime

Access our exclusive private Slack channel for tailored advice and real-time support from our team.

Flexible pricing options

Start for free. Drop-in authentication for production-grade security and compliance, without replacing your existing identity stack.

FAQ

Do I need to migrate my users off AWS Cognito?

No. Authsignal connects to your AWS Cognito user pools via Lambda triggers. Your user directory, sessions, and existing authentication flows all stay in place. Authsignal adds capabilities on top — it doesn't replace anything underneath.

Can I use Authsignal alongside Cognito's built-in MFA?

Yes. You can run Authsignal's adaptive MFA alongside or instead of Cognito's native MFA. Many teams start by adding Authsignal for passkeys and step-up authentication on sensitive actions, then progressively migrate other MFA flows as needed.

Why choose Authsignal?

Deploy passkeys and MFA in weeks instead of months. Flexible integration options including pre-built UI, UI components, or headless SDKs. A visual no-code rules engine for adaptive authentication policies. Real-time developer support, comprehensive documentation, and step-by-step integration guides. SOC 2 Type 2, ISO 27001, and FIDO Alliance certified.

What does it cost to integrate with Authsignal?

You can start integrating on our free tier immediately — up to 1,000 monthly active users at no cost. For production deployments, plans start at $1,099/month. Enterprise pricing is available for larger deployments. See our pricing page for details.

Which MFA methods does Authsignal support?

Passkeys (FIDO2/WebAuthn), biometrics, SMS OTP, email OTP, WhatsApp OTP, push notifications, authenticator apps (TOTP), and magic links. All methods are available from a single integration and managed via the no-code rules engine.

What programming languages and SDKs are supported?

Server SDKs for Node.js, Python, Ruby, Java, C#, PHP, and Go. Client SDKs for Web (JavaScript/TypeScript), React Native, iOS (Swift), and Android (Kotlin). Plus a REST API for any language.