Private key in the eSIM
The private key is used only inside the protected eSIM context. The website, partner and transport never receive it.
SECURITY BEYOND CONNECTIVITY
SaferSIM inside. Security built into the phone.
With SaferSIM, you approve logins on your phone. Depending on the partner integration, the request appears directly through the eSIM profile – without an additional app – or in an app. The private key stays hardware-protected in the eSIM.
Partner PortalSecurity area
PASSWORDLESS ACCESS
Welcome back.
Enter only your username. Approval happens through SaferSIM.
No website PIN. No additional password.
SaferSIMinside
PROTECTED REQUEST
Approve login?
Partner Portal wants to start a new session for anna.k.
ServicePartner Portal
ActionLogin
Valid03:00 min
Local SaferSIM PIN
Simplified view – the PIN is verified only on the phone.
The private key stays in your phone
See the service and action before approval
Only you approve
01 / OUR PRINCIPLE
My private key stays with me. Every approval does too.
You see which service requests which action. The partner receives only verifiable evidence – never your private key or local PIN.
- Local on your device
- Hardware-protected in the eSIM
- Approved only by you
FROM SAFERSIM LAB / SAFERSIM LOGIN
01Enter your username. 02Approve on your phone. 03Signed in.
SaferSIM Login
SaferSIM Login is the first product from SaferSIM Lab. You review the request, approve it locally, and only after a verified response does the service open the session – without a website password.
Open SaferSIM Shop01
The service sends the request
It belongs only to this login and expires after a short time.
02
SaferSIM delivers it to the right phone
The request is delivered securely to your registered profile.
03
You review and approve
Your SaferSIM PIN stays on the phone. Neither browser nor partner sees it.
04
The service signs you in
It verifies the signed response and only then opens your session.
TECHNICAL OVERVIEWWho does what during login?
PARTNERStarts and verifies the session
Creates the one-time request and verifies the signed response.
SAFERSIMDelivers the request
Routes the time-limited request to the registered profile without replacing your approval.
eSIM APPLETProtects the key and PIN
Checks locally, increments the counter and signs only the approved response.
See SaferSIM Login in the shop.
SaferSIM Shop shows how the login works. Depending on the partner, it runs directly through the eSIM or through an app with an eSIM-protected key.
TECHNOLOGY PEOPLE CAN UNDERSTAND
Your key is protected in the eSIM.
The personal key stays local in the hardware-protected eSIM context. You see which service requests which action and approve that exact request.
WEBSITE OR APP
Login request
eSIM IN YOUR PHONE
Your key
stays here
eSIM IN THE PHONESaferSIM
Security CoreKey · PIN · reuse protection
Security CoreKey · PIN · reuse protection
The key stays in the eSIM
YOU ARE IN CONTROL
A request arrives. You decide.
You see which service is asking and what it wants. Then you approve – or decline. Your key stays protected in the eSIM.
TECHNICAL DETAILS Private keys, partner registration and encryption
SaferSIM stays simple for users. Behind the scenes, several layers make each request specific, protect it in transit and prevent reuse.
Registered partners
Before a partner can send requests, it is registered and technically connected. Its identity is part of every permitted request.
Protected transport
The request reaches the registered profile through an authenticated and encrypted channel.
Specific request
A one-time challenge binds the partner, session and action. It expires quickly and cannot be used for something else.
Local approval
Only your approval allows the key to be used. When required, a local PIN adds another check.
Signature and replay protection
The signed response contains the challenge and a counter. The partner checks both and rejects old or duplicate responses.
HOW TO USE SAFERSIM
Directly through the eSIM. Or together with an app.
Depending on the partner integration, login works directly through the eSIM or through an app that uses the protected key in the eSIM.
SaferSIM Login
The request appears on the phone. You check it, approve with your local PIN and are signed in.
App + eSIM key
The app shows the action. The key stays protected in the eSIM and confirms only what you approved.
SaferSIM in the plan
SaferSIM connects to the profile, activation and customer account as a visible security feature.
SaferSIM Wallet
A wallet that combines an app interface with keys protected in the eSIM.
Visit SaferSIM WalletTHE VISIBLE TRUST MARK
Where SaferSIM inside appears, security becomes recognizable.
The mark connects the mobile offer, customer account and partner login. It shows where SaferSIM is included, whether it is active and where it can be used.
01MOBILE OR PARTNER OFFER
Partner Mobile
Security is
included.
SaferSIM is available as a security feature in a compatible offer.
SaferSIMinside
Security feature includedClearly marked in the offer
Before activation: SaferSIM as a contract and offer feature.
02CUSTOMER ACCOUNT
My account
SECURITY
SaferSIMinside
SaferSIM activeThis profile is registered for approvals.
ActiveAfter activation: status, device and lifecycle in one place.
03PARTNER LOGIN
SIGN IN SECURELY
Your account
Usernameanna.k
Protected by SaferSIM inside
At the decisive moment: the same mark and approval logic.
FOR CUSTOMERS AND PARTNERS
One security feature. Four clear benefits.
Consumers get clarity. Companies simplify login and approval. MVNOs stand out, while MNOs add a security service to their eSIM infrastructure.
CONSUMERS
You see what you approve.
- in many cases, direct eSIM login without an additional app
- local PIN instead of another website password
- see which service requests which action
- ask the provider for SaferSIM
B2B COMPANIES
Direct eSIM login or apps with eSIM-protected keys.
- passwordless login and approval path
- signed challenge between partner and applet
- PIN reaches neither browser nor partner
- visible approval for sensitive actions
MVNO
Differentiate beyond data volume and price.
- security as a visible contract feature
- co-branding with SaferSIM inside
- new B2B and consumer partnerships
- login and trust services on the profile
MNO
Turn the eSIM into a security service.
- manage profiles and keys for many customers
- security services for consumer, B2B and partner customers
- support blocking, key renewal and partner separation
- visible value across network and partner portfolio
A PARTNERSHIP USERS CAN SEE
SaferSIM inside from activation to login.
We bring SaferSIM into the offer, customer account and login. Partners receive the technology, integration support and a clear launch model.
PARTNER+SaferSIMinside
Co-branding
SaferSIM inside appears in the offer, activation and security area.
Activation
Profile, partner and local key are connected securely.
Integration
The partner sends a request bound to the service and action. The eSIM returns a signed response after local approval.
Launch
We coordinate activation, customer journey and ongoing support with you.
SaferSIMinside
Plan integration
Your offer. Your login. SaferSIM inside.
Start with a login or activation integration.
FAQ
The important questions, answered clearly.
Short and straightforward.
Is SaferSIM another authenticator app?
No. Login works directly through the eSIM in many cases, without an additional app. Where an app interface is useful, the key remains local and hardware-protected in the eSIM.
Where is my private key stored?
On your phone. The key is hardware-protected in the eSIM. It is not sent to the website or partner and is used only after you approve the request.
What does “SaferSIM inside” mean?
The mark shows that SaferSIM is included in the offer. In the customer account and at login, the status next to it shows whether SaferSIM is active and connected. The mark does not assess the security of the partner’s complete service.
Does SaferSIM work on every smartphone?
Available functions depend on the smartphone, operating system, eSIM profile and mobile provider. Before activation, we show what is supported on the device.
What does the partner see of my SaferSIM PIN?
The local PIN stays within the SaferSIM context and is not sent to the browser, partner or SaferSIM Lab. The partner receives verifiable evidence for the specific challenge and approval instead.
How does a company or operator start?
With an integration project: define the target system and user group, select the profile and device path, connect login or approval, then coordinate activation and support.
Where else can the protection model be used?
The same approach can also support VPN, PKI, passkey, Windows, wallet and signature solutions—through apps and eSIM-protected keys.
REQUEST SAFERSIM
How would you like to use SaferSIM?
Consumers can ask their mobile provider for SaferSIM. Companies and operators connect SaferSIM directly to their login, app or mobile offer.
TEXT FOR YOUR PROVIDER
Do you offer SaferSIM as a security feature in your mobile or customer offering? I want to use logins and approvals through a SaferSIM-enabled eSIM profile.