SafeNet MobilePASS+

SafeNet MobilePASS+ generates one-time passcodes and supports push approvals for logins on mobile, wearable, and Windows devices. When a user requests access to a protected resource, a push notification can be approved with one tap. If push is unavailable, the user can enter an OTP generated by MobilePASS+ on another device. The listed code types are TOTP and HOTP.

The app supports automated provisioning and QR-code installation and activation. Authentication can use an alphanumeric PIN or supported biometrics, including Touch ID and Face ID on iOS, fingerprint or facial recognition on Android, and Windows Hello for Business. Thales names Citrix NetScaler, Microsoft Office 365, and Cisco ASA as compatible examples. Supported platforms include Android, iOS, Apple Watch, Chrome OS, Windows, and macOS. Thales says the product is FIPS 140-2 compliant and uses encrypted DSKPP seeding so authenticator seeds are not transmitted over air or wire. The company also lists zero-touch lifecycle administration, over-the-air provisioning, and user self-enrollment. Pricing is available by request from an Access Management specialist.

MobilePASS+ offers push approval alongside one-time codes and several listed provisioning and administration options. Organizations should confirm pricing and compatibility with their specific services and devices.

Thales describes MobilePASS+ for employees, partners, and consultants who need one-time passcodes or push-based login approval. Its administration and provisioning features are also relevant to organizations managing authenticators for users.

Overview

SafeNet MobilePASS+ is an organization-focused authenticator for employees, partners, and consultants signing in to protected services. It is best suited to teams that want push approvals, one-time codes, and managed enrollment across several device types. Its strongest advantage is a push workflow with an OTP fallback; the trade-off is custom pricing and an enterprise-oriented setup.

Key features

A login request can arrive as a push notification that the user approves with a tap. When push is unavailable, the user can enter a code generated by MobilePASS+ on another device. Supporting both TOTP and HOTP gives organizations more than one code-based option, though the fallback still requires access to a device running the authenticator.

Automated provisioning, QR-code installation and activation, self-enrollment, over-the-air provisioning, and zero-touch lifecycle administration give IT teams several ways to manage enrollment and ongoing changes. That breadth should be useful for larger access programs; teams seeking only a personal code generator may have little use for the administrative layer. Named compatible examples include Citrix NetScaler, Microsoft Office 365, and Cisco ASA.

Authentication can be unlocked with an alphanumeric PIN or supported biometrics: Touch ID or Face ID on iOS, fingerprint or facial recognition on Android, and Windows Hello for Business on Windows. Thales says MobilePASS+ is FIPS 140-2 compliant and uses encrypted DSKPP seeding to keep authenticator seeds from being transmitted over air or wire. It also states that VPAT 2.0 and WCAG certification applies to Windows 10.

Thales says organizations can migrate incrementally while retaining existing token investments, a practical advantage for teams that cannot replace an authentication program all at once.

Pricing

MobilePASS+ is paid, with custom pricing. Organizations must contact an Access Management specialist for a quote; there is no published per-user price or plan breakdown to compare. That approach may suit buyers evaluating an organization-wide deployment, but it leaves smaller teams without a clear way to estimate cost before contacting sales.

Platforms

Supported platforms include Android, iOS, Apple Watch, Chrome OS, Windows 10 and 11, and macOS. The broader operating-system coverage also names Linux and FIDO-compliant operating systems. This range can accommodate mixed fleets, although the listed biometric options vary by operating system. NFC is not supported.

Who it's for

MobilePASS+ makes the most sense for organizations managing authentication for employees, partners, and consultants across supported services and device types. Its provisioning and lifecycle tools are aimed at administrators, while push approval and OTP fallback give end users two ways to complete a login. Individuals looking for a free standalone authenticator should look elsewhere.

Pros and cons

• Pro: Push approval has an OTP fallback, so users have another route when push notifications cannot arrive.
• Pro: Automated provisioning, self-enrollment, and lifecycle administration support managed rollouts and upkeep.
• Pro: PIN and platform-specific biometric unlock options give users alternatives for protecting access to the authenticator.
• Con: Custom pricing requires a sales inquiry, making cost harder to assess before engaging with the vendor.
• Con: NFC is unsupported, which rules out that option for organizations that require it.

Alternatives

For a free, open-source authenticator that requires a YubiKey to store credentials and generate codes, consider Yubico Authenticator. For authentication centered on a hardware key family with quote-based pricing, Deepnet SafeKey is another option. Swissbit iShield Key 2 offers USB-A or USB-C and NFC, with pricing through a sales partner.

HID Approve is a paid consumer and workforce authentication option delivered through a mobile app or SDK. Solo 2 is a paid, fully open-source alternative. The YubiKey 5 Series has paid hardware options, including models with USB and NFC. The FEITIAN ePass FIDO-NFC Security Key is a $$35 one-time hardware option with USB-A or USB-C, NFC, FIDO U2F/FIDO2, and HOTP/TOTP. For a customizable mobile or watch OTP offering priced by quotation, consider FEITIAN Mobile Authenticator.

Readers comparing categories can also browse Security Keys, Customer Identity and Access Management Software, Identity and Access Management Software, Authenticator apps, and Passkey Authentication Software.

Verdict

Choose SafeNet MobilePASS+ if your organization needs managed authentication with one-tap push approval, OTP fallback, and provisioning across a mixed device fleet. The main reason to choose it is the combination of end-user flexibility and administration tools; the main reason to look elsewhere is custom pricing, particularly if you need a free personal authenticator or a clear upfront cost.