Typing Biometrics
Typing biometrics, also known as keystroke dynamics or keystroke biometrics, is a form of behavioral biometrics that analyzes patterns in the way people type on a keyboard. Typing biometrics can be used for identity verification, two-factor authentication (2FA), fraud prevention, and continuous endpoint authentication (CEA).
How does typing biometrics work?
Typing biometrics works by analyzing characteristics of how someone types, such as the timing of key presses and releases and the time between consecutive keys. A user's typing pattern can then be compared with previously enrolled patterns to help verify their identity. Because typing can be captured using a standard keyboard, typing biometrics does not require dedicated biometric hardware.
TypingDNA applies typing biometrics across several authentication and security scenarios:
Typing biometrics for custom authentication and fraud prevention. The TypingDNA Authentication API enables developers to add typing biometrics to applications for scenarios such as login authentication, password resets, account sharing prevention, adaptive authentication, and other identity verification flows.
Typing biometrics for two-factor authentication. TypingDNA Verify 2FA provides a ready-to-use phone-free 2FA solution. When authentication is required, users type 4 short words displayed on-screen and are verified based on their typing pattern.
Typing biometrics for SMS authentication. TypingDNA SMS+ strengthens SMS OTP by replacing the exposed code in the SMS with a secure link. The user opens the link and types 2 words before the OTP is revealed.
Typing biometrics for continuous endpoint authentication. TypingDNA ActiveLock continuously verifies employees based primarily on how they type on Windows and macOS computers, helping detect unauthorized use after login.
Depending on the use case, typing biometrics can operate as an explicit authentication step or passively in the background. Verify 2FA and SMS+ ask users to type short phrases as part of an authentication flow, while ActiveLock continuously analyzes typing behavior during normal computer use without requiring repeated authentication prompts.
Typing behavior can also provide signals beyond identity verification. TypingDNA Human Likeness analyzes typing behavior to determine how closely an interaction resembles natural human typing, providing a behavioral signal for detecting bots and automated input rather than identifying a specific person.
Typing biometrics has a variety of use cases across authentication, identity fraud prevention, account sharing detection, continuous authentication, and security controls designed to protect sensitive data. Its accessibility makes it particularly useful because it can work with existing keyboards on computers and mobile devices without requiring dedicated biometric sensors.
Learn more about the TypingDNA Authentication API or explore how TypingDNA uses typing biometrics for 2FA and continuous authentication.