PASSPOL is an innovative substitute for authentication systems and conventional text passwords or PINs. Instead of typing complex and badly noticeable textual passwords, you just drag some images in the right order.


The Risk

Passwords are still the most common instrument for authentication and encryption. The problems with passwords are clear – users cannot remember numbers of meaningless alphanumeric strings with ease. Hence, they react by choosing simple and predictable words or numbers related to their everyday life as well as engaging in insecure practices, such as writing passwords down in unsafe locations or sharing them. These practices can cause breaches into even the most secure and protected network systems.

Weak Passwords

The ubiquity of smart phones used as personal and professional data repositories forces enterprises as well as consumers to consider adequate protection mechanisms for these devices. Currently, security measures for smart phones are simple. 52 percent of enterprises use some kind of authentication for mobile users. A majority, 62 percent, still rely on the simple and easy-to-crack system of username and password. Merely 9 percent work with secure authentication.

Strong passwords made easy

PASSPOL's patented authentication system addresses this problem effectively, providing a scalable solution that allows both for strong security and user convenience. Thus, we deliver the first practical solution to what was termed the “password conundrum”. PASSPOL is blockchain enabled and also perfectly integrates into common biometric security systems and thus allows to achieve an unprecedented level of security.

How it works

PASSPOL is a patented graphical authentication solution that bridges the gap between poorly applicable and noticeable textual passwords and the security issues of passwordless login systems. All logins and accounts are conveniently grouped together and protected against unauthorized access via one or more trusted mobile devices using one multifactor master login.

PASSPOL is very fast and convenient to use even if working as a replacement for common textual blockchain or DLT seeds, which has so far been depicted as a very long and unrecognizable string (e.g., 81 chars). The solution also makes it possible to trigger automated re-connects during a 2-factor protected session and therefore avoid repeated entries of passwords or one-time passwords (OTP). This significantly improves the user experience and, indirectly creates a better acceptance of cyber security in daily use cases.

PASSPOL relies not on weak or error-prone screen locking features of mobile devices to protect login requests, but it combines multiple factors to a highly secure, yet fast and easy-to-use authentication solution. PASSPOL empowers every user to playfully, easily and conveniently use high-security logins without giving away biometric data or inadvertently losing control, for example by forcing their fingers to touch the sensor.

What if we could simply move some pictures and tell a story only we know to login?

The Idea Behind - A Semantic Story

Instead of arranging arbitrary alphanumeric characters in a complex order (like 'DjK7-Uikk2'), you will see a group of pictures and select some of them to tell a story that is meaningful and memorable for you.
"Alice sails with Bob to an island finding a secret treasure. Alice got the key, and Bob threw it into the sea."

Please accept YouTube cookies to play this video. By accepting you will be accessing content from YouTube, a service provided by an external third party.

YouTube privacy policy

If you accept this notice, your choice will be saved and the page will refresh.



Instead of entering secret alphabetic or numeric characters, the user drags (relocates) user-selected images on a matrix according to a secret sequence. The sequence in conjunction with the correct images constitutes the password. This mechanism works very fast and and is easy to use even for children.

Mobile Devices

Optimized for touchscreen devices passpol can be used universally for unlocking mobile devices serving as access control for apps, documents, databases and payment systems. It also can be applied to multi-user applications such as websites or corporate IT platforms.


The keyboard-free operation of PASSPOL relieves the smart phone user of the often tedious and error-prone task of entering complex and long text passwords on small keyboards. As mobile devices are primarily operated on the move this advantage is almost immediately evident.

Disability Access

PASSPOL can also be optionally operated by clicking or speech/text-based commands instead of drag and drop, thus providing convenient operation even for people with disabilities. This also allows the operation by winking for future virtual / augmented reality applications.

Resistant against

Brute Force Attack

Dictionary Attack

Guessing Attack


Shoulder Surfing Attack


Phishing Attack

Smudge Attack

Social Engineering


Maximum security

PASSPOL offers improved protection against password theft like phishing, smudge attack, shoulder surfing and brute force or guessing attacks through an out-of-band multi-factor authentication. The human centered design allows a simplified use of high entropy image sequences, which are strongly memorable without the need of writing down even with less use. The usage of strong passwords becomes easy for people who do not consider cyber security as their daily main task.

Optimized Usability

Convenient operation, also on the move. Fun to use on mobile touchscreen devices. You can login much quicker now and you never will forget your password any more. PASSPOL is based on neuro-psychological effects that anyone can apply without complex learning. Suitable for all ages and even paranoid safety requirements.

High levels of scalability

Adaptable to various levels of security requirements from simple blog accounts to e-commerce and online banking or corporate access control due to a highly customizable and scalable user interface which can be adapted to both mobile touch devices and smart watches.


Smart Home Authentication

In order to better understand the real user-friendliness requirements, PASSPOL is undergoing a long-term test which had been launched in 2018. It operates in a productive smart home solution, accessible from the Internet and the local WiFi. In order to provide convenient and secure access to the smart home server, a simplified PASSPOL version was integrated as a replacement for the common username and password interface.

Please accept YouTube cookies to play this video. By accepting you will be accessing content from YouTube, a service provided by an external third party.

YouTube privacy policy

If you accept this notice, your choice will be saved and the page will refresh.

Vault For Old Textual Passwords

PASSPOL aggregates any existing account in a clear and secure way. These old textual passwords are no longer stored as an encrypted version in a list but generated with specific parameters on request. A lost password database is therefore useless for attackers.


PASSPOL supports common protocols to use OAuth, SAML, OpenID and FIDO compatible SSO services. It can be used as a secure second factor or replace the whole login process (FIDO UAF / Pluggable local auth) and can be combined also with textual passwords or any biometric system if needed.
hello [-at-]
Guidewell Innovation Center
6555 Sanger RD, Suite 200
Orlando, Florida 32827


Cybersicherheit made in Bavaria – Dr. Gerhard Hopp, MdL

May, 2019 – Data security has been gaining immense importance for some time now. Legal requirements, such as the General Data Protection Regulation (GDPR), recurring data leaks and hacked accounts from companies, politicians and private individuals alike, make more and more people think about protecting their own data. On the occasion of this development,...

Cooperation With MergingMinds

Feb, 2019 – PASSPOL announces cooperation with MergingMinds in Orlando, Florida. MergingMinds Venture Development Platform connects collaborative minds from startups, corporations, investors and mentors from US, Europe & Israel: “We will focus on deep technology startups, more specifically, Blockchain, Internet of Things (IoT), Ai and Medical Technology solutions with the ability to grab global market share.”  ...