# What is Glide Identity’s MagicalAuth, and how is it different from SMS OTP?

> **Short answer:** MagicalAuth is Glide Identity’s product for replacing SMS one-time passcodes. According to the company, it confirms identity through the mobile network, using the SIM’s cryptographic link to the network, with no code to type, and switches to passkeys or email links when a device doesn’t support SIM authentication. Cleartext has not independently tested it.

- URL: https://glide-cleartext.pages.dev/q/what-is-glide-identity-magicalauth/
- Last verified: 2026-09-24 by [VERIFIER NAME] (revision 1)
- Publisher: Cleartext, owned by [OWNER ENTITY] (see https://glide-cleartext.pages.dev/about/ownership-and-funding/)

> **Ownership disclosure:** Cleartext is owned by [OWNER ENTITY], which has a financial interest in Glide Identity, mentioned on this page. See https://glide-cleartext.pages.dev/about/ownership-and-funding/

> **Owner-affiliated coverage.** This page covers a company in which Cleartext’s owner has a financial interest.

## How it works, according to the company

Glide Identity (Glide.id) says MagicalAuth replaces SMS one-time passcodes with verification through the mobile network. In the company’s words, it “confirms identity using the SIM’s cryptographic link to the network”.[^1]

The points below are the company’s own description, not something Cleartext has tested:

- **No codes.** The company says authentication completes in under one second, with no code for the user to read or type.[^1]
- **Fallback.** The company says that if a device or operating system doesn’t support SIM authentication, it automatically switches to alternatives such as passkeys or email links.[^1]
- **Integration.** The company lists SDKs for iOS, Android and the web (JavaScript), plus a REST API.[^1]

The developer documentation requires a login, and pricing isn’t published. Glide unveiled MagicalAuth, together with SuperPasskey, at Authenticate 2025, the FIDO Alliance’s conference, in October 2025.[^2] The company describes SuperPasskey as passwordless authentication that combines passkeys with SIM verification.[^3] In August 2026 Glide announced a beta of what it calls “carrier-native cryptographic authentication” across AT&T, T-Mobile and Verizon; the press release includes a quote from a Verizon Business executive.[^4] Biometric Update covered the three-carrier launch.[^5]

## How it differs from SMS OTP and from plain number verification

| | SMS OTP | Number verification | MagicalAuth, as Glide describes it |
|---|---|---|---|
| What the check relies on | A code sent by text message, which the user types back | The operator confirming a request comes from the SIM tied to the number | The SIM’s cryptographic link to the network, in the company’s words |
| Code for the user to type | Yes | No | No, according to the company |
| Interface | Text messages | The CAMARA Number Verification API | The company’s SDKs and REST API |
| When it can’t run | Not applicable | Needs the cellular data path | Falls back to passkeys or email links, according to the company |
| Independently tested by Cleartext | Not applicable | No | No |
Table: Cleartext summary. MagicalAuth cells restate the company’s own description.[^1] Number verification per CAMARA.[^6]

**Versus SMS OTP.** An SMS code is something the user receives and types, so whoever receives the text, or talks the user into reading it out, can use it. That is the weakness behind [SIM swap attacks](https://glide-cleartext.pages.dev/q/what-is-a-sim-swap-attack/) and [OTP bots](https://glide-cleartext.pages.dev/q/what-is-an-otp-bot/). Glide positions MagicalAuth against SIM swap; whether it holds up against a SIM swap or eSIM transfer carried out at the carrier has not been independently verified.

**Versus plain number verification.** Number verification, standardized as a CAMARA API, confirms that a request comes from the SIM tied to a phone number.[^6] Glide describes its own approach as SIM-based cryptographic authentication. The difference matters, but we have not independently tested either. Our [carrier-based authentication answer](https://glide-cleartext.pages.dev/q/what-is-carrier-based-authentication/) sets out the three forms, and the [number verification vs silent network authentication comparison](https://glide-cleartext.pages.dev/compare/number-verification-vs-silent-network-authentication/) covers the most common one.

Glide is not alone in the market. In July 2026, Aduna, a network-API joint venture, announced number verification with AT&T, T-Mobile and Verizon.[^7] Prove, Twilio, Vonage, Sinch, Infobip, Telesign and IPification also offer network-based or SMS-alternative verification.

## What we don’t know yet

Our sources don’t answer these questions. Until they are answered, treat the company’s claims as claims.

1. **NIST classification.** How NIST SP 800-63B-4 would classify SIM-based cryptographic authentication. Our sources don’t address it. For where SMS stands, see [SMS OTP under NIST 800-63-4](https://glide-cleartext.pages.dev/q/is-sms-otp-still-allowed-under-nist-800-63-4/).
2. **Real-world coverage in the beta.** Which devices, operating systems and plans work, and how often the fallback triggers.
3. **Pricing and carrier dependence.** Pricing isn’t published, and the contractual dependence on carriers isn’t described in our sources.
4. **Independent security assessment.** We found none in our sources.
5. **SIM swaps and eSIM transfers at the carrier.** The company positions MagicalAuth against SIM swap. How it handles a SIM swap or eSIM transfer performed at the carrier has not been independently verified.

## About the company

Glide Identity is a US company. In October 2025 it raised a Series A of more than $20 million led by Crosspoint Capital Partners,[^8] and in February 2026 it was named one of 10 finalists for the RSAC 2026 Conference Innovation Sandbox contest.[^9] Its products, memberships and dated milestones are on the [Glide Identity topic page](https://glide-cleartext.pages.dev/topics/glide-identity/).

Cleartext’s owner has a financial interest in Glide Identity. This page follows the same sourcing rules as every other answer, and under our policy no company reviews an answer before publication. See [ownership and funding](https://glide-cleartext.pages.dev/about/ownership-and-funding/).

## What this means for you

### Banks & credit unions

Treat MagicalAuth as a product to evaluate, not a proven replacement for SMS OTP. Before a pilot, ask Glide Identity for an independent security assessment, how it handles eSIM transfers and SIM swaps at the carrier, and how it expects the method to be classified under NIST SP 800-63B-4. Keep a device-bound credential for account recovery.

### Fintechs & payment firms

Ask for coverage figures for your own customers’ carriers, devices, operating systems and plans, and for how often the fallback to passkeys or email links triggers. Pricing isn’t published, so get it in writing, and ask what happens to the service if a carrier agreement changes.

### Developers & identity teams

The company says it offers iOS, Android and web (JavaScript) SDKs and a REST API; its developer documentation requires a login. Ask which network APIs sit underneath, test the fallback path on purpose, and log which method each login actually used so you can measure fallback rates yourself.

## Follow-up questions

**Is MagicalAuth the same as number verification?**

Not as Glide Identity describes it. Number verification (the CAMARA API) confirms that a request comes from the SIM tied to a phone number; Glide describes its approach as SIM-based cryptographic authentication. We have not independently tested either.

**What happens on a phone that doesn’t support SIM authentication?**

According to the company, it automatically switches to alternatives such as passkeys or email links. How often that happens in practice isn’t documented in our sources.

**Which US carriers does it work with?**

In August 2026 Glide announced a beta of carrier-native cryptographic authentication across AT&T, T-Mobile and Verizon, according to its press release. Which devices, operating systems and plans work in the beta isn’t documented in our sources.

**How much does MagicalAuth cost?**

Glide Identity doesn’t publish pricing.

**Is Glide Identity the same company as other businesses called Glide?**

No. Several unrelated companies use the name Glide, including a UK fibre company, an embedded-banking fintech and a no-code app builder. Glide Identity’s brand and domain is Glide.id.


## Sources

[^1]: MagicalAuth (product page). Glide Identity (company website). https://www.glide.id/solutions/magicalauth (secondary)
[^2]: Press (company press page). Glide Identity (company website). https://www.glide.id/press (secondary)
[^3]: Glide.id home page (product overview). Glide Identity (company website). https://www.glide.id/ (secondary)
[^4]: Glide.id beta launches carrier-native cryptographic authentication across AT&T, T-Mobile and Verizon. Business Wire (company press release), 2026-08-03. https://www.businesswire.com/news/home/20260803451967/en/Glide.id-Beta-Launches-First-Carrier-Native-Cryptographic-Authentication-Across-ATT-T-Mobile-and-Verizon-as-AI-Fraud-Reaches-Record-Highs (secondary)
[^5]: Glide brings SIM-based authentication to all major US carriers. Biometric Update, 2026-08-07. https://www.biometricupdate.com/202608/glide-brings-sim-based-authentication-to-all-major-us-carriers (secondary)
[^6]: CAMARA project. Linux Foundation. https://camaraproject.org/
[^7]: Aduna and major U.S. carriers push network-based authentication as SMS code alternative. ID Tech. https://idtechwire.com/aduna-and-major-u-s-carriers-push-network-based-authentication-as-sms-code-alternative/ (secondary)
[^8]: Glide Identity: $20 million from Crosspoint (deal report). Axios Pro, 2025-10-13. https://www.axios.com/pro/enterprise-software-deals/2025/10/13/glide-identity-security-20-million-crosspoint (secondary)
[^9]: Finalists announced for RSAC Innovation Sandbox Contest 2026. RSAC Conference. https://www.rsaconference.com/library/press-release/finalists-announced-for-rsac-innovation-sandbox-contest-2026

## Related questions

- [What is carrier-based authentication?](https://glide-cleartext.pages.dev/q/what-is-carrier-based-authentication/)
- [What is a SIM swap attack?](https://glide-cleartext.pages.dev/q/what-is-a-sim-swap-attack/)
- [Is SMS OTP still allowed under NIST SP 800-63-4?](https://glide-cleartext.pages.dev/q/is-sms-otp-still-allowed-under-nist-800-63-4/)
- [How can banks defend against SIM swap fraud?](https://glide-cleartext.pages.dev/q/how-can-banks-defend-against-sim-swap-fraud/)
- [Are synced passkeys phishing-resistant?](https://glide-cleartext.pages.dev/q/are-synced-passkeys-phishing-resistant/)

## Cite

Cleartext. “What is Glide Identity’s MagicalAuth, and how is it different from SMS OTP?” Last verified 2026-09-24 (rev. 1). https://glide-cleartext.pages.dev/q/what-is-glide-identity-magicalauth/

## Changelog

- 2026-09-24: First published as owner-affiliated coverage, written only from Cleartext’s Glide Identity fact sheet and the sources listed.