heylogin

heylogin is a Braunschweig, Germany-based identity vendor that replaces the traditional master-password model of password managers with a hardware-bound key stored on the user’s smartphone. Instead of a memorized master password protecting an encrypted vault, heylogin ties decryption to the physical device, combined with two-factor verification by default, so a compromised password database alone is not enough to expose stored credentials. The company positions this explicitly against conventional password managers as its core differentiator.

Founded in 2018 by Dr. Dominik Schurmann and Vincent Breitmoser, both with backgrounds in applied IT security research at TU Braunschweig, heylogin has built its product and its go-to-market around European small and mid-sized businesses rather than large enterprise IAM buyers. The company is ISO 27001 certified and develops and hosts its infrastructure in Germany, a positioning choice aimed at European buyers with data-sovereignty requirements.

heylogin’s funding is early-stage: its investors include German Business Angels and Mozilla Ventures, the latter a notable independent validator given Mozilla’s own security and privacy track record, though the round size has not been publicly disclosed. The company has not raised the kind of large venture rounds that would signal aggressive scaling plans, consistent with its SMB-focused, steady-growth positioning.

As a smaller, Europe-focused vendor, heylogin’s public evidence base leans on its own architecture claims and ISO 27001 certification rather than independent penetration testing or large enterprise case studies, which is typical for a company at this stage and should be weighed accordingly.