availableAvailableReviewed 5 Sept 2026
What is Keyra?
Keyra is a hardware-security oriented identity platform for verifying people and approving sensitive requests. It builds on more than 15 years of Ciright Cyber One Card experien…
Search
Keyword search with aliases for Cyber One, Ciright, SIM, eSIM, iSIM and common typos.
40 results
availableAvailableReviewed 5 Sept 2026
What problems is Keyra designed to solve?
Keyra addresses weak software-only authentication and fraud-prone approval of sensitive actions by anchoring verification in hardware-backed mobile security. Public materials hi…
availableAvailableReviewed 5 Sept 2026
What does hardware-rooted authentication mean?
Hardware-rooted authentication means authentication proofs depend on credentials or operations protected by hardware security environments rather than software-only secrets. For…
availableAvailableReviewed 5 Sept 2026
How is authentication different from authorization?
Authentication establishes who or what is presenting a proof. Authorization decides whether that authenticated party may perform a specific action. Keyra workflows may use hardw…
pilotPilotReviewed 5 Sept 2026
Which Keyra products can I use today?
Publicly evidenced today: Keyra consumer-facing messaging and technology pages on keyra.ie and app.keyra.ie, including TestFlight beta and Android early access pathways, plus th…
pilotPilotReviewed 5 Sept 2026
Where can I find the official Keyra applications?
Start at keyra.ie for official product navigation and access pathways. Public messaging references iPhone TestFlight beta and Android early access for supported users. Technolog…
availableAvailableReviewed 5 Sept 2026
Which Keyra site should a developer use?
Developers should use the intended developer portal at developer.keyra.ie once services are confirmed, and rely on published technical records such as Ciright-Inc/keyra-java-sdk…
availableAvailableReviewed 5 Sept 2026
How do I know whether a Keyra feature is live or planned?
Check the lifecycle label on each product and answer: available, pilot, planned, proposed, deprecated or unknown. Vault Certified is framed as a target architecture; Connected a…
availableAvailableReviewed 5 Sept 2026
Do I need a physical Keyra card?
Not necessarily. Company declaration states current hardware-verified security runs on SIM, eSIM and iSIM, extending beyond the physical Cyber One Card. A physical card may stil…
availableAvailableReviewed 5 Sept 2026
How does the physical Cyber One Card technology lineage extend to SIM, eSIM and iSIM implementations?
Joseph Callahan’s 5 September 2026 company declaration states Keyra builds on more than 15 years of Ciright Cyber One Card experience and that the technology now runs on SIM, eS…
availableAvailableReviewed 5 Sept 2026
Is a connectivity eSIM the same as a Keyra security applet?
No. A connectivity eSIM profile provisions mobile subscription credentials for network access. A Keyra security application or applet is a distinct security workload for hardwar…
pilotPilotReviewed 5 Sept 2026
Which phones and carriers support the required functionality?
Support is eligibility-based, not universal. Public Keyra messaging references iPhone TestFlight beta and Android early access, which implies selected device pathways rather tha…
availableAvailableReviewed 5 Sept 2026
What happens if I change my phone, number or carrier?
Changing phone, number or carrier can affect subscription binding, security-application eligibility and recovery steps. Because Keyra hardware-verified security is declared on S…
availableAvailableReviewed 5 Sept 2026
Can I use Keyra while roaming?
Roaming may allow ordinary connectivity, but Keyra hardware-verified features depend on device eligibility, provisioned security applications and verifier reachability—not on ro…
availableAvailableReviewed 5 Sept 2026
What happens when my device is offline?
Offline behavior depends on whether verification requires a live challenge to a Keyra or relying-party backend. Local hardware operations may still be possible in some designs, …
availableAvailableReviewed 5 Sept 2026
Where are my cryptographic keys generated and stored?
Keys used for hardware-verified security are intended to be generated and protected in hardware-backed environments associated with the active form factor—card historically; SIM…
unknownUnknownReviewed 5 Sept 2026
Can an organization control its own key infrastructure?
Organizational key control is a program design choice across enterprise, bank, government or telco custody models. Keyra documentation must state which models are supported, pro…
availableAvailableReviewed 5 Sept 2026
What happens if a device or key is compromised?
Compromise response should revoke or suspend affected credentials, rotate keys where supported, and re-enroll on a trustworthy form factor. Hardware-verified designs aim to cont…
availableAvailableReviewed 5 Sept 2026
How does recovery avoid bypassing the intended protection?
Safe recovery re-establishes hardware-backed credentials under policy instead of accepting a weak software-only bypass. Lost-device recovery should preserve the hardware trust b…
availableAvailableReviewed 5 Sept 2026
Can Keyra reduce SMS OTP usage?
Yes—that is a primary problem framing. Hardware-verified mobile security aims to reduce reliance on SMS one-time passwords for authentication and sensitive approvals. Public Key…
unknownUnknownReviewed 5 Sept 2026
Which costs remain when an SMS OTP flow is replaced?
Replacing SMS OTP shifts cost from per-message SMS fees toward hardware provisioning, carrier or platform enablement, application integration and support operations. Exact prici…
availableAvailableReviewed 5 Sept 2026
How does a developer begin integration?
Begin with published technical records: review Ciright-Inc/keyra-java-sdk for partner 2FA, OAuth and post-login verification patterns; obtain sandbox credentials; implement agai…
availableAvailableReviewed 5 Sept 2026
Which SDKs and APIs are available now?
A publicly evidenced SDK is Ciright-Inc/keyra-java-sdk, covering partner 2FA, OAuth, post-login verification and sandbox versus live credentials. Additional language SDKs or API…
availableAvailableReviewed 5 Sept 2026
Is there a sandbox and how is it separated from production?
Yes. The keyra-java-sdk documentation distinguishes sandbox credentials from live credentials so developers can test partner 2FA and post-login verification without using produc…
unknownUnknownReviewed 5 Sept 2026
How are webhooks verified and retried?
Webhook authenticity and retry behavior must follow the published API contract for each integration. The public keyra-java-sdk establishes that partner verification flows exist …
availableAvailableReviewed 5 Sept 2026
What customer information does an application receive?
Applications receive only the verification and profile attributes permitted by consent, publisher policy and the integration contract. Public Keyra positioning emphasizes privac…
availableAvailableReviewed 5 Sept 2026
How are consent and access revocation handled?
Consent governs what an application may receive and when. Users and administrators should be able to revoke access so subsequent verifications fail closed for that publisher rel…
availableAvailableReviewed 5 Sept 2026
How do Keyra identities relate to Ciright application records?
Keyra sits in the Ciright application network lineage. Identifiers and application records may relate across Ciright properties, but each application retains its own boundaries …
availableAvailableReviewed 5 Sept 2026
How are tenants and application publishers isolated?
Tenant and publisher isolation prevents one organization’s credentials, users or audit data from being retrieved by another. Integrations should authenticate as a specific appli…
unknownUnknownReviewed 5 Sept 2026
What is KPAN and what is its current status?
KPAN means Keyra Payments Authentication Network—a named program for payment-related authentication. Its hostname seed is kpan.keyra.ie. Live commercial status is not independen…
availableAvailableReviewed 5 Sept 2026
Does authentication also move or settle a payment?
No. Authentication and authorization of a payment instruction are distinct from clearing and settlement. Keyra-related payment authentication—including any KPAN flows—addresses …
availableAvailableReviewed 5 Sept 2026
What is transaction-bound approval?
Transaction-bound approval ties a user’s or policy decision to a specific transaction payload so a generic login proof cannot be replayed for a different amount, payee or action…
plannedPlannedReviewed 5 Sept 2026
What distinguishes Keyra Vault Certified from Keyra Connected?
Keyra Vault Certified is framed as a target architecture for validated end-to-end hardware-rooted authorization unless later approved evidence establishes otherwise. Keyra Conne…
proposedProposedReviewed 5 Sept 2026
Does wallet connectivity imply Keyra certification?
No. Connecting a wallet or achieving network reachability does not imply Keyra Vault Certified status. Connected is proposed and may use alternative authorization paths. Certifi…
unknownUnknownReviewed 5 Sept 2026
How can a human approve an AI agent's action?
Humans should approve sensitive agent actions through an explicit authorization step that shows scope, resource and risk—ideally hardware-verified when available. Ciright-relate…
availableAvailableReviewed 5 Sept 2026
Can an agent's authority expire or be revoked?
Yes—delegated authority should support expiry, scope limits and revocation so compromised or obsolete agents stop acting promptly. Revocation must invalidate outstanding tokens …
availableAvailableReviewed 5 Sept 2026
What information appears in an authorization audit trail?
A useful authorization audit trail records who or what approved, what was requested, when, under which policy, which credential class was used, and the decision outcome. For har…
unknownUnknownReviewed 5 Sept 2026
What can a government or enterprise control locally?
Governments and enterprises commonly seek local control over policy, residency, administrator roles, key custody options and audit retention. Which of these Keyra supports in a …
availableAvailableReviewed 5 Sept 2026
Which certifications have actually been obtained?
This knowledge center does not invent certifications. Historical CyberONE public materials reference FIDO-oriented themes; that is not proof of a current Keyra certification lis…
availableAvailableReviewed 5 Sept 2026
Does standards alignment equal certification?
No. Designing toward a standard or using standard vocabulary differs from holding an accredited certification for a specific product version and scope. Keyra answers may cite st…