BearPass Enterprise Password Manager

2025

Compatibility with Rutoken OTP and Rutoken MFA

Specialists of the companies "Asset" and "Bearpass" conducted tests and confirmed the correctness of the joint work of the hardware authenticators Rutken OTP and Rutken MFA in the corporate password manager BearPass. With two-factor authentication, Rutoken devices protect access to login and password data stored in the service. This was announced by "Asset" on June 23, 2025.

To protect access to accounts of the corporate password manager, the BearPass system uses two-factor authentication technology, implemented, among other things, using hardware authenticators. The solution is supported by the Rutken OTP device, which uses the OTP (Time-Based) One-Time Password algorithm in addition to the login-password bundle. There is also support for the Rutoken MFA line of user tokens, which are used for authentication in web applications based on the FIDO2 technology stack (CTAP2).

To exchange authentication information, the corporate password manager BearPass uses the JSON Web Token (JWT) standards, which provides a modern and secure user authorization mechanism using hardware authenticators such as Rutoken. The use of two-factor authentication allows you to secure access to user passwords of enterprise services.

As a result of the cooperation of the teams, the hardware authenticators Rutken OTP and Rutken MFA were introduced and two-factor authentication was provided in the accounts, which significantly increased the security level of the corporate password manager BearPass.

We are pleased that companies creating new classes of solutions, such as the corporate password manager, trust the expertise of Aktiv in the field of multifactor authentication. Integration with the BearPass product was fast and smooth, which confirms the high quality of the Rutoken Product Development Kit, said Pavel Anfimov, Head of Product and Integration at Aktiv.

{{quote 'author=noted Valery Komyagin, CEO of Bearpass. | Aktiv is a company trusted by millions of people in our country. The collaboration of Rutoken OTP and Rutoken MFA hardware authenticators with our corporate password manager BearPass provides two-factor authentication and significantly increases the security of access to accounts. The use of standards such as JSON Web Token and FIDO2 allows us to guarantee the protection of customer data at the highest level. We are proud of our collaboration and solutions to build a secure and secure infrastructure for customers, providing confidence and security in the digital space,}}

BearPass release 2.19.0 with support for password-free authentication using biometric data

The developer Russian of the corporate manager passwords BearPass presented the release 2.19.0. The key change was support for password-free authentications with. The biometric data company announced this on April 24, 2025.

With the release of 2.19.0, BearPass users have the opportunity to use more convenient password-free methods for two-factor authentication using the WebAuthn protocol: biometrics, including a fingerprint scan and FaceID, as well as hardware security keys using USB drives.

"Second factor" or "two-factor authentication" is a method in which the user needs to use two different tools to identify the identity. For example, enter a pair of "login and password," and then enter a one-time password received in a push notification, SMS message or from a letter sent to a trusted email address.

In addition to the obvious increase in comfort for users, WebAuthn authentication increases security against password theft through phishing, a method in which logins and passwords are intercepted by attackers masquerading as sites of well-known brands or government information systems.

WebAuthn is a standard that provides fast and password-free user authentication. Based on FIDO technology (from the English Fast Identity Online) - the technology of online authentication of the user's identity.

{{quote 'author=said Valery Komyagin, CEO of BearPass. | Modern threats require modern solutions. The introduction of biometric authentication in this version of BearPass was not just a technological update, but a strategic step towards improving the security of our customers' corporate data. Biometrics, based on the user's unique physiological characteristics, is not only a reliable way to store corporate passwords, but also a convenient tool for authorization in systems. It eliminates risks associated with password leakage or matching and accelerates authentication processes by improving user experience,}}