By using all of the thousands of data points available such as typing or swiping techniques, location, online habits, face recognition, devices, and yes even passwords, we can determine someone is who they say they are; we even know the Monday person can behave differently to the Friday person.
Most of these data points are friction-free for the user, and so we use these to determine that someone's behaviour is within their normal pattern. Where there is a veering from the norm we then intelligently introduce further tests, avoiding a rules-based approach that can be replicated by the bad guys. We have the lowest false positive rates in the industry and zero breaches thanks to our inbuilt malware detector.