Sign Up Your Company for NearAuth.ai
NearAuth.ai doesn't replace your identity provider. People keep their Google or Microsoft accounts; NearAuth.ai takes over the second step, checking that their own phone is next to their own computer. You switch people over by group, so nobody outside the group is affected while you try it.
1. Everyone starts here
Create your company
Go to nearauth.ai/start and enter your name and work email. Use the email you sign in to Google Workspace or Microsoft 365 with; you become the company's NearAuth.ai administrator. The Essential plan is free for up to 12 people, with no credit card.
You'll get a setup email within a few minutes. If not, check spam or write to help@NearAuth.ai.
Install NearAuth.ai on your phone
Install NearAuth.ai from the App Store or Google Play, open it, and enter the same email. Then open the setup email on that phone and tap the link.
Install it on your computer and pair the two
Install NearAuth.ai on your Mac (Mac App Store) or Windows computer (downloads) and enter the same email. It shows a QR code: scan it with your phone, or tap Enter code instead on the phone and type the six-digit code. Keep Bluetooth on for both devices.
Open your admin console
Go to secure.nearauth.ai/company and click Start here. It tracks these steps and marks each one Done as NearAuth.ai sees it. The exact values you'll paste into Google or Microsoft below (entity IDs, sign-in URLs, client IDs) are shown there and under Documentation, filled in for your company.
Invite your team
On Start here, paste the work emails of the people to protect, one per line. Each gets an email with the same two installs you just did. Set yourself up first so you can test before anyone else is switched over. Larger teams can invite a whole Google or Entra group instead (see After you're set up).
Before you switch anyone over, keep two emergency admin accounts that never sign in through NearAuth.ai, with long passwords and a hardware security key or authenticator app. In Google Workspace use super admin accounts; in Entra ID, exclude them from the Conditional Access policy below. The If NearAuth is unavailable page in your admin console shows how to switch everyone back in minutes. Print it or save it somewhere you can reach without NearAuth.ai.
2. After you're set up
- Invite a whole group: on the Onboarding page, pick a Google or Entra group. NearAuth.ai invites everyone in it, reminds people who haven't set up every 3 days (up to 3 times), invites people added later, and adds each person to the NearAuth group once their phone is ready.
- Off-site sign-ins: on the Off-site sign-ins page, choose what happens when people sign in away from your offices.
- Linux servers: the Linux SSH guide in your admin console sets up SSH certificates that only work with the person's phone nearby.
- A lost or new phone: on the Users page, reset the person's devices so they can set up the new phone. Confirm it's really them first, by phone or in person, not just by email.
Questions? Email help@NearAuth.ai or call 607-238-3533.
Not signed up yet? Start free: up to 12 people.