Secrets Vault launches the first technology that combines innocuous images with post-quantum cryptography

Barcelona, October 13, 2025. The official launch of Secrets Vault Identity marks a milestone in cybersecurity, thanks to the first digital authentication system based on images and post-quantum cryptography. This innovation simplifies the user experience without sacrificing security and represents a decisive step towards the future of authentication.

Developed by the Spanish startup Secrets Vault, led by Jordi Puiggalí and Gerard Cervelló —two of the founders of Scytl—, this innovation offers companies and public administrations a new way to authenticate their users with greater security, less friction, and readiness to withstand the challenges of the quantum era.

The problem with passwords and other current mechanisms

For decades, passwords have been the standard for accessing systems: they are cheap, familiar, and very functional. However, they are increasingly synonymous with insecurity, costs, and frustration:

• Password theft represents the main entry point for hacking and fraud, with multimillion-dollar costs for the global economy.
• The growing sophistication of attackers means that passwords must become increasingly complex, driving up support costs (an average of $70 per reset).
• According to the National Institute of Standards and Technology (NIST), excessive complexity causes users to reuse passwords or write them down in insecure locations, facilitating attacks.
• More than 65% of users do not use password managers for security or usability reasons, which increases system vulnerability.

Although there are alternatives (such as hardware tokens, passkeys, biometrics, or digital certificates), their adoption remains limited due to high costs and restricted environments.

The solution: Secrets Vault Identity

The proposal from Secrets Vault is as simple as it is disruptive: replacing passwords, SMS codes, and authentication apps with images.

• The user chooses a meaningful photo, which becomes their access key.
• The image is neither stored, modified, nor uploaded to the cloud: the key is generated locally on the device transparently.
• This key enables robust and future-proof authentication.

Secrets Vault Identity uses post-quantum algorithms, designed to resist attacks even when quantum computing is capable of breaking most of today’s security. In this way, it guarantees that keys generated from images will remain secure in the future.

“Secrets Vault Identity gives control back to the user. It’s no longer about remembering impossible strings, but about using an image that’s part of your life,” explains Jordi Puiggalí, cryptography expert and creator of the technology.

Key differences from previous attempts

• Images do not store information, so they can remain hidden in plain sight, for example, in the device’s photo gallery.
• Even an image modified by social networks would still function as a key.
• The system does not collect or store images or personal data, simplifying regulatory compliance.
• It works on any device, browser, or system, without the need to install additional software or hardware.

Benefits for companies and users

Secrets Vault Identity combines the simplicity of passwords with the strength of post-quantum security, enabling multiple authentication scenarios:

• Real passwordless access: combines an image with a PIN, pattern, or biometric data.
• Simplified MFA: replaces SMS, emails, and authentication apps with an image.
• Account recovery: automates the process and reduces costs by using images as recovery keys.
• Soft token: combines an image with a physical element (for example, a USB drive) for more secure access.
• Passkey roaming: deploys passkey technology without relying on third parties.
• Physical access: combines an image with facial validation without processing biometric data.

In all these use cases, the advantages are significant:

• Deployment is straightforward, as it requires no installation on user devices and operates under international standards.
• The risk of impersonation and account takeover is reduced.
• Operational costs decrease by reducing technical support needs and eliminating physical tokens.
• Integration is smooth and compatible with any IAM platform or as a standalone solution.
• The experience is more natural, private, and human.
• Regulatory compliance is simplified, as no personal data is processed and the solution is compatible with standards such as NIS2.

Secrets Vault Identity functions as an Identity Provider and can be implemented as a standalone solution or integrated into existing IAM platforms. It is available in Microsoft Entra, OneIdentity, Google, Keycloak, and many others, facilitating immediate adoption in enterprise environments.

With Secrets Vault Identity, Secrets Vault redefines digital authentication: the first and only solution that transforms innocuous images into secure keys, resistant to the post-quantum era. A technology that offers top-level security, user simplicity, and cost savings for companies. Book a demo now!