NezT Labs: Passkey Login and eKYC Onboarding

NezT Labs (in-house concept build) · iOS & Android Apps · 2026

An in-house concept build: a sign up and login flow for fintech, wallet and lending apps that removes passwords entirely and completes identity checks inside the app.

What it does

Passkeys (FIDO2 and WebAuthn) replace passwords. The private key never leaves the phone and is protected by Face ID, Touch ID or the Android biometric prompt.

ID capture with automatic edge detection and glare checks, plus NFC chip reading for e-passports and chip based national IDs that follow the ICAO 9303 standard.

Face liveness through a certified third party SDK, so a photo or screen replay cannot pass.

Device integrity checks before high risk actions, and step up verification for transfers, new payees and limit changes.

Engineering notes

Keys live in the Secure Enclave on iOS and in the Android Keystore, using StrongBox hardware where the device supports it.

App Attest and the Play Integrity API let the backend reject requests from tampered or emulated devices.

Every verification step is logged with a reason code, which gives compliance teams a clear audit trail.

Tech stack

Swift, SwiftUI, AuthenticationServices, CryptoKit, App Attest, Kotlin, Jetpack Compose, Credential Manager, Play Integrity API, Node.js

Impact

A login with no password to steal or reuse, designed around the identity checks that banks, wallets and lenders are required to run.