Straxis and Yubico Launch Secure Mobile Web App to Access Essential U.S. Military Email, Pay and Travel Services
Yubico and Straxis have launched MilSecure Mobile, a secure web browsing application for U.S. military personnel. This app allows secure access to protected DOD websites on personal mobile devices using the new YubiKey Secure Web feature. The U.S. Air Force will be the first to integrate this feature into its Air Force Connect mobile app.
MilSecure Mobile enables users to securely authenticate into DOD Common Access Card (CAC)-enabled sites while on the go, accessing email, HR information, and medical applications. The app supports multiple authentication protocols and is approved for use with Purebred derived credentials. It offers customizable URL listings, pre-loaded DOD certificates, and supports various connectivity options for both Android and iOS devices.
- Launch of MilSecure Mobile app, enabling secure access to DOD websites on personal devices
- U.S. Air Force integration of Secure Web feature into existing Air Force Connect app
- YubiKey support for multiple phishing-resistant authentication protocols
- Approval for YubiKey FIPS Series to be provisioned with Purebred derived credentials
- Potential improvement in military personnel's work-life balance and retention through easier access to essential services
- None.
The United States Air Force will be the first military service to integrate the Secure Web feature into its Air Force Connect mobile app, which was launched in 2019. The integration of the Secure Web feature will be a needed upgrade to modernize its authentication technologies and practices.
“Two-factor authentication with CAC-derived credentials is the next logical step in making the Air Force Connect mobile app more useful for Airmen,” said Bob Everdeen, chief of Air Force public web. “I’m excited to see the results from the current round of enhancements of this important, next-level feature.”
Yubico and Straxis have been working together since 2019 to create a secure web browsing experience to ensure that servicemembers' sensitive information is protected by using a seamless login process.
“Enabling and optimizing the workforce, especially the warfighters and those conducting exercises, deployment missions, and domestic military operations has been a priority for Yubico,” said Alex Antrim, Yubico senior solutions engineer and retired Navy Senior Chief Petty Officer. “By leveraging YubiKeys with MilSecure Mobile on personal mobile phones, today’s announcement reinforces the goal to enable secure access to the
YubiKeys support multiple phishing-resistant authentication protocols such as FIDO2/WebAuthn, U2F and Smart Card (PIV), offering a bridge to passwordless authentication for enterprises and government agencies of all sizes. The YubiKey FIPS Series is approved to be provisioned with Purebred derived credentials. A first of its kind MilSecure Mobile app with YubiKey Secure Web browsing feature, users will benefit by being able to securely authenticate into DOD Common Access Card (CAC)-enabled sites while on the go with their own personal devices to perform tasks such as viewing DOD email, human resources information, and medical applications to move necessary workflow impacting communication, mission and medical readiness requirements that positively impact being able to balance personal, professional, family and military worklife, and personnel retention.
MilSecure Mobile highlights include:
- Secure browsing support with CAC derived credential and PIN authentication using a YubiKey
- Customizable library of DOD URL web services and interface without additional user configuration
- Unit-level Content Management System to customize URL web services listings
- Pre-loaded Root and Intermediate DOD certificates for CAC-enabled website trust
- Built-in certificate management to support shared devices
- Support for Lightning, USB C, and Near Field Communication (NFC) connectivity
- Available for Android and iOS smartphones and tablets
“Since mobile phone operating systems do not have native, built-in Smart Card support, it makes it difficult for military service members to securely access DOD web services on mobile devices,” said Jason Christensen, lead developer, Straxis. “By partnering with Yubico on the Secure Web feature, we’re able to solve this by deploying MilSecure Mobile.”
Legacy forms of MFA, such as SMS and one-time passcodes (OTP), in conjunction with the continual rise of AI-based phishing, are proving to be an easy target that are vulnerable to cyber attacks. While the
“When I was a drilling Reservist, I struggled with using my Common Access Card with my modern smart phone to access
To learn more about how MilSecure Mobile app was created, see the blog here. iOS app can be downloaded here and will be coming soon to Android.
About Yubico
Yubico (Nasdaq First North Growth Market Stockholm: YUBICO), the inventor of the YubiKey, offers the gold standard for phishing-resistant multi-factor authentication (MFA), stopping account takeovers in their tracks and making secure login easy and available for everyone. Since the company was founded in 2007, it has been a leader in setting global standards for secure access to computers, mobile devices, servers, browsers, and internet accounts. Yubico is a creator and core contributor to the FIDO2, WebAuthn, and FIDO Universal 2nd Factor (U2F) open authentication standards, and is a pioneer in delivering hardware-based passwordless authentication using the highest assurance passkeys to customers in 160+ countries. For more information, visit: www.yubico.com.
Yubico’s solutions enable passwordless logins using the most secure form of passkey technology. YubiKeys work out-of-the-box across hundreds of consumer and enterprise applications and services, delivering strong security with a fast and easy experience.
As part of its mission to make the internet more secure for everyone, Yubico donates YubiKeys to organizations helping at-risk individuals through the philanthropic initiative, Secure it Forward. The company is headquartered in
About Straxis
Straxis Technology is a full-service, award-winning company that has provided technology solutions for over a decade. Based in
View source version on businesswire.com: https://www.businesswire.com/news/home/20240709206270/en/
Media Contacts:
Yubico Media Relations
Press@yubico.com
Straxis Media Relations
info@straxis.com
Source: Yubico
FAQ
What is MilSecure Mobile and how does it work with YubiKey?
Which U.S. military branch will first integrate the Secure Web feature?
What types of DOD services can be accessed through MilSecure Mobile?
Is MilSecure Mobile available for both Android and iOS devices?