We’re going passwordless.
If you hold an account with us, soon you’ll no longer need to log in with a password.
And no, we haven’t lost the plot. The reason is pretty simple.
Passwords were a pretty good security feature 30 years ago. Computing power was limited, sophisticated attacks were expensive, and the average person didn’t have dozens of online accounts competing for their attention.
Fast-forward to today.
The cybersecurity landscape has changed dramatically.
Attackers have access to enormous computing power, sophisticated password-cracking tools, credential-stuffing attacks, phishing kits and databases containing billions of previously compromised credentials.
And yet, somehow, we’re still asking people to create a password containing:
One uppercase letter.
One number.
One special character.
A hieroglyph.
The blood of a unicorn.
Then, because apparently that still isn’t enough, we add another layer.
Enter the OTP.
“Enter the six-digit code we’ve just sent you.”
Then the email:
“If you did not attempt to log in, contact us immediately.”
Then, just to make absolutely certain you’re human:
“Please select all the squares containing a bus.”
And then:
“Excellent. Now select all the squares containing a traffic light.”
At some point you have to wonder whether you’re logging into your account or applying for citizenship.
These measures have their place, but they often feel like layers of friction being added around a fundamentally outdated experience.
They’re cumbersome.
They’re time-consuming.
And, frankly, they’re a ball ache.
You just want to access your account.
The reality is that the average person now has a huge number of online accounts, subscriptions and services. Remembering a unique, genuinely strong password for every single one simply isn’t realistic.
So people reuse passwords.
They choose predictable passwords.
They write them down.
They store them somewhere insecure.
Or they create a password so complicated that they inevitably end up resetting it five minutes later.
That’s not a great security model.
So we’re changing the model.
At Blue City Capital, the goal is simple:
One account.
One secure authentication process.
No password.
You authenticate yourself, we establish that it’s really you, and you’re in.
No password to remember.
No password to reuse.
No “forgotten password” dance.
No spending your afternoon proving to a collection of increasingly suspicious traffic lights that you are, in fact, a human being.
Security shouldn’t have to mean making the legitimate user jump through hoops.
At Blue City Capital, you have one login.
And you’re in.
No password needed.
You don’t need to do anything. We will write to you to explain how we will keep your account even more secure, and how you will be able to access your account without having to tap the “Forgot Password?” link.