Logins · Transactions · Digital signatures

Ready to retire the SMS OTP?Upgrade your security.

Approve logins, approve transactions and sign documents with one tap. No passwords, no SMS codes — a key that never leaves your phone, anchored in LankaSign PKI.

Device-bound keys · biometric approval · aligned to PDPA No. 9 of 2022

AnybanQID app — home screen
How it works

Prove it's you in three seconds.

No passwords to remember, nothing to type. A request comes to your phone, you check it, you approve it.

1

A service asks

A bank, fintech or app asks to confirm your identity or have you sign a document.

2

It reaches your app

Scan the QR code on screen, tap the app link on your phone, or simply open AnybanQID — the request shows exactly who is asking and what for.

3

You approve

Confirm with your face or fingerprint. The request is signed by a key that never leaves your device.

You join through your organisation. AnybanQID is set up by your employer or bank: open the invitation link they email you, confirm your details with a code sent to your phone and register this phone — after that, approving takes a tap. Your personal signing certificate is issued the first time you sign a document (or when you join a company that requires it).

What you can do

One identity, everywhere it matters.

The same trusted identity for logging in, signing, and sharing only what you choose to share.

⇲

Passwordless sign-in

Log in to partner banks, fintechs and services with a tap instead of a password or SMS code.

✎

Sign documents

Sign agreements with a certificate issued to you personally and held on your phone — built on LankaSign, Sri Lanka's national certification authority, not just a typed name.

◪

Consent-first sharing

Share your verified details only when you agree, and see a record of every request you've approved.

For business

Bring AnybanQID to your organisation.

  1. Contact AnybanQ at hello@anybanq.lk — we set up your organisation and send your administrator sign-in.
  2. Sign in at id.anybanq.lk/dashboard with that sign-in, and choose your own password.
  3. Invite your staff by link — they install AnybanQID and set it up on their phone.
  4. Developers integrate using the developer docs — CIBA or app approval, by QR code, app link or in the app.
# CIBA — issuer https://id.anybanq.lk/oidc
curl -X POST https://id.anybanq.lk/oidc/oauth2/bc-authorize \
  -u "$CLIENT_ID:$CLIENT_SECRET" \
  -d 'login_hint=nic:<12-digit NIC>' \
  -d 'scope=openid profile'
# → { "auth_req_id": "…", "interval": 5 } — they approve in the app

# Poll every {interval} seconds until tokens arrive
curl -X POST https://id.anybanq.lk/oidc/oauth2/token \
  -u "$CLIENT_ID:$CLIENT_SECRET" \
  -d 'grant_type=urn:openid:params:grant-type:ciba' \
  -d "auth_req_id=$AUTH_REQ_ID"