Abstract: The password, a half century old concept that many depend on to preserve the confidentiality and integrity of data is badly broken, and accordingly places data and systems at great risk of loss or breach. This paper describes a passive and user independent means of applying concepts of identity, device trust, and risk based authentication to secure access to on-premise and cloud based resources; many of which rely solely on passwords. Additionally, this novel approach to authentication can further facilitate truly mobile computing, while maintaining, if not improving the overall user experience.