01
Banking & finance
Years inside core banking, payments and fraud operations — so the platform is shaped around real KPIs: account-takeover reduction, recovery cost and time-to-reactivate.
— ABOUT REKEY
ReKey is a product of a Portugal-based company, established in 2024, building trusted device authentication and transaction assurance for banks and regulated institutions. We are a team of specialists drawn from banking and finance, digital identification, cryptography and security.
Founded
2024
Locations
Lisbon · Porto 🇵🇹
Focus
Mobile trust
Built for
Regulated finance
— 01 · Who we are
The idea of ReKey was born in 2023, around a simple conviction — that organisations should be able to know, with cryptographic certainty, that the right customer is using the right device.
The people behind ReKey have spent their careers on opposite sides of the same problem. Some built and ran core banking, payments and fraud platforms inside financial institutions. Others designed digital identification and onboarding systems, wrote the cryptography that protects keys on mobile devices, or led security and assurance programmes under regulatory scrutiny.
That mix is deliberate. Trusted device authentication sits exactly where those disciplines meet: a hardware-backed key is only useful if it is bound to a verified identity, governed by sound key lifecycle, and trusted by the risk and fraud teams who answer for it. ReKey was built by people who have lived each of those responsibilities.
From our base in Portugal, we work with banks, credit unions, payment providers and regulated fintechs across Europe and beyond — with deployment options that respect data residency, sovereignty and the operational control these institutions require.
— 02 · OUR DISCIPLINES
ReKey exists at the intersection of the fields its founders came from. Each one shapes how the Mobile Trust Core is designed, built and operated.
01
Years inside core banking, payments and fraud operations — so the platform is shaped around real KPIs: account-takeover reduction, recovery cost and time-to-reactivate.
02
Onboarding, KYC and identity-assured recovery expertise — binding a trusted device to a verified person, not just a guessed fingerprint.
03
Hardware-backed keys, challenge-response signing and dynamic linking, engineered by people who understand secure keystores and attestation at the protocol level.
04
Device assurance, app integrity and adaptive risk built by practitioners who have run security and assurance programmes under regulatory scrutiny.
— 03 · HOW WE WORK
A short set of principles that decide what we build, and what we refuse to.
The institution stays in control
Policy, revocation, audit and deployment model belong to the bank — never to us. We never hold a customer's private key.
Cryptographic proof over guesswork
Device binding with hardware-backed keys and signed challenges, rather than fingerprints that drift, spoof or break under mobile-OS restrictions.
Sovereignty is not an afterthought
On-premises, managed cloud or hybrid from day one — for institutions with data-residency and operational-control requirements.
Plain answers, not marketing puffery
Clear documentation, honest scope, and a library you can read without a lead-capture wall.
— 04 · NEXT STEP
Tell us what you want to discuss: architecture, deployment, recovery, transaction signing or partnership. A specialist from the relevant discipline will follow up directly.