Companies are required to provide secure login methods, either due to regulatory requirements (such as GDPR, MaRisk [Minimum Requirements for Risk Management], VAIT [Supervisory Requirements for IT in Insurance Undertakings], BAIT [Supervisory Requirements for IT in Financial Institutions]) or out of the company’s own interest to protect its digital assets. Simple authentications with username and password are no longer sufficient; transactions have to be specifically authorised (PSD 2), data traffic has to be analysed and regulated.