2026 State of Passwordless Identity Assurance Report | SUCCESS STORY
Earning Trust From Day One: How Oxbury Built a Secure, Modern Banking Experience With HYPR Authenticate
Industry:
Financial Services / Digital Banking
Location:
Chester, United Kingdom
For Oxbury Bank, trust and simplicity were foundational principles from the very beginning.
As a digital-first bank built specifically for farmers and savers across the UK, Oxbury wanted every part of the customer experience to feel modern, secure, and intuitive — including how customers accessed their accounts.
When Oxbury launched in 2021, passwordless authentication was still an emerging approach, particularly within European banking. But the team believed traditional passwords were already becoming a source of unnecessary friction and risk. Rather than treating authentication as a secondary consideration, Oxbury made it a priority.
Here's how Oxbury partnered with HYPR to build passwordless authentication directly into its digital banking platform and create a seamless and secure experience from the start.
While we have contracts in place that require background and identity checks, threat actors are becoming very sophisticated and very practiced in bypassing some of those regulations and requirements that we put in place.
Company Overview
Oxbury Bank is a UK challenger bank dedicated to supporting the agricultural sector, providing tailored lending products to farmers and rural businesses and savings to all. Built as a fully digital bank, Oxbury combines deep sector expertise with modern technology to deliver efficient, customer-centric banking services.
Given its role as a regulated financial institution in the UK, Oxbury operates under strict data protection and security requirements, including UK GDPR and oversight from the Financial Conduct Authority (FCA) and Prudential Regulation Authority (PRA).
As the bank scaled its platform, ensuring secure and compliant customer authentication while remaining accessible and easy to use for customers became a critical priority.
The Challenge
Building a Modern Banking Experience That Balances Security and Ease of Use
As Oxbury prepared to launch its digital banking platform, the team had an opportunity to rethink authentication from the ground up.
Rather than adopting traditional passwords and legacy MFA approaches, Oxbury wanted to create a customer experience that reflected the simplicity and ease of use customers increasingly expect from modern digital services.
Several priorities shaped their vision:
Seamless Login Experience
Authentication needed to feel fast, intuitive, and frictionless, especially for customers accessing banking services regularly through mobile and web applications.
Strong Security Foundations
Even with good password hygiene education, people often fall back on the same handful of passwords. They may also share and write them down, increasing security risk. Oxbury wanted to minimise reliance on passwords and shared secrets, thereby reducing exposure to phishing and credential-based attacks.
Long-Term Scalability
As a growing digital bank, the team wanted an authentication approach that could scale with the platform and support future innovation.
Regulatory Alignment
Operating in the UK financial sector required strong alignment with GDPR, FCA, and PRA expectations around secure customer authentication and data protection.
Oxbury required a solution that could elevate security while simplifying the customer journey — without compromising compliance.
The Approach
Eliminate Passwords For Customers
After evaluating available approaches, Oxbury selected HYPR as the best fit for its vision of frictionless, secure banking.
HYPR Authenticate enabled Oxbury to build passwordless customer authentication into its modern authentication experience. The shared framework satisfied both Oxbury's velocity and security needs and helped them achieve several key priorities, including:
● Delivering a seamless customer experience
● Reducing reliance on vulnerable shared secrets and credentials
● Implementing phishing-resistant multi-factor authentication
● Supporting regulatory expectations
● Creating a scalable foundation for future digital growth
Integrating HYPR’s complete suite of tools—including their native mobile SDK and streamlined server-side deployment—made implementation incredibly smooth.
At a time when passwordless authentication was still emerging within financial services, Oxbury took an early leadership position by adopting the technology at launch rather than retrofitting it later.
The Impact
Happier Customers, Greater Confidence From Stakeholders
Adopting passwordless authentication transformed Oxbury's customer experience in a number of ways: Achieving Gold-Standard Compliance As a new entity with a niche product suite, Oxbury didn’t have to meet European PSD2 Strong Customer Authentication (SCA) standards at launch. Leadership built to this standard anyway, and leveraging the frontier technology immediately differentiated Oxbury in the UK challenger bank landscape. In conversations with regulators and investors, the FIDO2 architecture provided a “bombproof” response to security concerns.
It also resonated with users. Some of the first customer reviews on Feefo explicitly highlighted the security layer, noting that the sophisticated login experience gave them the confidence to trust this new digital bank with their life savings.
Peace of Mind and Security While Scaling
HYPR continues to deliver peace of mind and productivity. In the years since Oxbury’s launch, the team hasn't raised a security incident related to HYPR. HYPR has scaled with Oxbury through rising customer numbers, higher authentication volume, and a threat landscape that continues to shift.
Oxbury managed this rapid scaling smoothly by choosing a distributed architecture where cryptographic secrets and biometrics remain solely on the user’s mobile device, effectively removing the risk of a centralized credential data breach while securing significant operational benefits.
Supporting a Lean Development Team
While traditional banking authentication suites require an entire dedicated infrastructure team to maintain, HYPR handles a big portion of the load. This support has allowed a lean engineering squad to manage the entire authentication footprint for over 70,000 customers, keeping the team focused on building new features rather than troubleshooting.
As Oxbury’s products and customer expectations evolved, HYPR’s development team and account manager worked closely with Oxbury to simplify journeys and incorporate new requirements as the bank moved forward with operations.
Why It Matters:
Designing Trust Into the Customer Experience
For Oxbury, authentication was never just a security feature. It was part of the bank’s overall customer experience strategy.
By building passwordless authentication into the platform from the start, Oxbury avoided many of the usability and security tradeoffs that financial institutions often face when modernising legacy systems later down the line.
The result is a banking experience that feels both seamless and secure while reinforcing customer trust every time users access the platform.
Looking Ahead:
Designing Trust Into the Customer Experience
Modern customer authentication is never a static point solution. Deploying and maintaining a secure mobile app requires constantly managing an evolving ecosystem and shifting regulatory demands.
Having an authentication partner that proactively handles those variables allows Oxbury to keep its user interface fresh and compliant without draining internal resources. And with passwordless authentication baked into the foundation, Oxbury is well positioned to continue enhancing its digital experience.
Future opportunities include:
● Further streamlining onboarding for new customers
● Expanding passwordless authentication across additional services
● Continuing to innovate while maintaining strong security and compliance foundation
Outcomes At a Glance
Oxbury Bank set out to improve both security and customer experience — without compromise. With HYPR Authenticate, they achieved:
● 70,000+ accounts secured through a seamless, passwordless login experience
● 0 security incidents in 5+ years
● Reduced friction and increased customer satisfaction
● Stronger trust and confidence in digital banking
● Allowed a lean development team to manage the entire authentication footprint while scaling rapidly
● Adopted FIDO2-backed architectures to confidently satisfy UK regulatory requirements
Ready to see how HYPR eliminates identity risks?
