Wirtualna Polska
Two-factor authentication for Wirtualna Polska, one of the largest internet portals in Poland. The second factor is a native iOS app built on OneLogin that approves a sign-in with a push notification, securing the accounts behind the portal's services, including its mail apps WP Poczta and Poczta o2.
The challenge
An account on a portal this size is a person's mail, their contacts and their identity across a dozen connected services, which makes it a target. A second factor has to be meaningfully stronger than a password without turning sign-in into something people give up on, and it has to work for an audience that spans every level of technical confidence.
Our approach
We built the second factor as a native iOS app on top of OneLogin: an approval request arrives as a push notification, the credential stays on the device, and enrolment is short enough to finish in one sitting. The same account protects the portal's other products, including its mail apps WP Poczta and Poczta o2, so the second factor had to work for an audience spanning every level of technical confidence.
The outcome
WP Konto is live in the App Store under the Wirtualna Polska name, alongside the portal's mail apps it protects. Account security moved from a password alone to a device the user is holding, at national portal scale.
