June 2026 Update: ASD has confirmed the Essential Eight will transition to a broader Essentials series over the next two years. The Essential Eight remains current and in force today, and your existing controls carry forward. What this means for your organisation ↓
The ASD Essential Eight is Australia's baseline cyber security framework. V-Key strengthens it where mobile matters most, phishing-resistant authentication and app-layer hardening, built for the apps your customers use every day.
Developed by the Australian Signals Directorate, the Essential Eight is a set of priority strategies that make it significantly harder for adversaries to compromise systems. It's mandatory for government entities and widely adopted across finance, healthcare, and critical infrastructure as the national standard for cyber hygiene.
V-Key delivers real, certifiable uplift on the two Essential Eight strategies most exposed on mobile — multi-factor authentication and application hardening.
ASD recommends strong, phishing-resistant MFA over SMS or push notifications for every user, on every system. V-Key delivers this natively.
Essential Eight’s hardening guidance was written for desktop browsers. V-Key extends that same discipline to the mobile app layer.
Authentication and hardening run continuously, not just at login
Common Criteria EAL3+ and FIPS 140-2 Validated — independently verified
Strong MFA at customer scale, not limited to internal admin accounts
Lightweight SDK integration into your existing iOS and Android apps
V-Key ID and V-Key Smart Authenticator deliver biometric, phishing-resistant MFA aligned with FIDO2
V-OS Mobile App Protection harden your app, protecting against tampering, reverse engineering, and overlay attacks
V-OS Virtual Secure Element provides FIPS 140-2 Validated, Common Criteria EAL3+ certified key protection
Replace SMS OTP and weak push notifications with biometric, device-bound authentication that scales across your entire customer base.
Runtime app protection, anti-tampering, and certified cryptographic security, extending Essential Eight discipline to mobile.
ASD has confirmed that existing Essential Eight investments remain relevant under the new framework. Organisations working toward compliance today are building on solid ground.
The Essentials series will extend guidance beyond traditional IT to cover cloud, operational technology, and emerging threats, reflecting how modern enterprise environments actually look today.
Phishing-resistant MFA and application hardening are security outcomes — not checkbox controls. V-Key's certified, on-device capabilities are built for the direction of travel under both frameworks.