NOTE: There is a currently a Zoom bug that prevents badges from rendering on Windows clients. We are actively working with Zoom to resolve this bug and will provide updates when a resolution has been reached.
RealityCheck for Zoom is a Zoom plug-in for Beyond Identity customers to secure their Zoom meetings with our zero-trust, phish-resistant MFA solution. Protect your Zoom meetings from generative AI and deepfakes by strongly verifying users and devices on the call.
Contents
Admin Installation
Existing Beyond Identity Customers
- Please submit a support ticket and our support team will follow up on next steps.
- Select RealityCheck Intake from the drop down options.
- Input in the Subject Line "RealityCheck intake".
- Input in the Description “Requesting RealityCheck”.
- Once the integration is set up, go to the RealityCheck app from Zoom App Marketplace listing and click "Add".
- Approve and add this app to users within your organization by clicking "Add for Others".
- All users that you added this app for will now have the RealityCheck app installed on their Zoom client.
- Instruct your users to follow the End-user Installation guide below to begin using RealityCheck for meetings.
Non Beyond Identity Customers
Our RealityCheck integration is a FREE add-on to our core zero-trust, phish-resistant MFA platform. You must be a Beyond Identity customer to be verified by RealityCheck.
Contact us and learn more about Beyond Identity and how RealityCheck plays into our mission.
End-user Installation
After installing this for your organization, have your end-users do the following:
- In the Zoom client, click Apps.
- RealityCheck should be available and installed if the steps above were followed by your admin.
- For ease of use, you can enable this app to launch on meeting start.
- When in a Zoom meeting, click Apps and launch RealityCheck. NOTE: When turning on camera with RealityCheck for the first time, Zoom will ask to install certain utilities for the app to function.
- Users will be unverified and presented with a login screen. Enter the company and click Verify with Beyond Identity. This will launch the Beyond Identity authentication flow.
- Once verified, a verification badge will appear on the camera stream.
NOTE: There is a currently a Zoom bug that prevents badges from rendering on Windows clients. We are actively working with Zoom to resolve this bug and will provide updates when a resolution has been reached.
- Hover over the shield icon to get additional information about the authentication.
How to uninstall RealityCheck
- Login to your Zoom account and navigate to the Zoom App Marketplace.
- Click Manage > Installed Apps or search for the RealityCheck - Deepfake Prevention for Zoom App.
- Click the RealityCheck - Deepfake Prevention for Zoom App.
- Click Uninstall.
FAQs
Q: Is this secure?
A: We know the badge of authenticity is spoofable, that's why we've built the admin side panel with security risk insights that cannot be tampered with.
Since each participant is rendering their own badge from their own Zoom client, an adversary can forge the badge - we are working under the assumption that an adversary has full control over their Zoom client, and has the necessary permissions to render a badge on their video stream.
What cannot be forged is the participants table in the side panel, as that information is being pulled directly from the Beyond Identity RealityCheck server that is hosting the application.
In our badge, we include a prompt that says "Confirm in side panel" because the badge cannot be considered fully secure at this time. We've discussed with the Zoom Apps developer team the possibility of implementing a feature for sender-side rendering of the badge. However, this feature is not currently on Zoom's roadmap.
Internally, we are exploring additional solutions to address this risk and enhance the overall security of our system.
Q: What are technical requirements for RealityCheck?
A: Your organization must be using Zoom as a video-conferencing platform, and you must be a Beyond Identity customer. Contact us to get a demo of our products.
Comments
0 comments
Please sign in to leave a comment.