• Sanj_John

Why Should You Authenticate Voice Assistant Users?

Conversational design and voice application development for Amazon Alexa, Google Assistant and Samsung Bixby requires consideration of each platform's authentication and security models. In this article, learn how it affects to both brands and consumers.

Authenticate users for a secure voice experience.

All in the Family

For this experiment, I ensured both my Alexa and Google devices were trained to recognize my voice so if I asked either assistant “Who am I?”, each would correctly identify me. I then ensured that neither assistant was trained to recognize my wife’s voice. She asked the devices “Who am I?”

Hey Google, Who Am I?

When she asked our Google Home device “Who am I?”, we got the following response: “Sorry, I wasn’t able to verify your voice. You can either try again or verify your voice match settings in the Google Home App.”

Alexa, Who Am I?

When she asked our Echo Show device “Who am I?”, we got a very different response. “I’m not sure who’s speaking, but you’re on Sanjeev Surati’s account.” A recent update from Alexa then prompts the person if they would like to setup a voice profile and if they agree, then walks them through setup.

Bixby, Who Am I?

When using Samsung Bixby, prior to training it with the voice of the registered device owner (in this case, a mobile phone), the voice assistant cannot tell the difference between users. Because the Samsung mobile phone owner signed into her Samsung account to activate Bixby on her phone, Bixby gives the name of the person who signed into Bixby on the device to anyone who asks "Who am I?". How many people will train voice assistants to recognize their specific voice?

Impact on Brands and Consumers

While some brands are just beginning to use voice technology to engage customers, others have integrated voice-first experiences with their customer relationship management (CRM) systems. Personalization requires authentication - verifying that the user is who they say they are - or in this case, who the voice assistant thinks they are. Consumers may not want others using their ride-share account, changing their favorite playlists or smart home routines. Brands don't want unauthorized users making purchases. Security is paramount to a successful voice app, just as it is with any other technology.

Voice App Design and Development Implications

The experiences detailed in this article continue on the backend technology of the voice apps. When you code an Alexa skill, you will be passed a UserId field containing an opaque id based on your account and the skill, however on Google, you are not passed a UserId and it is incumbent on the developers to manage and maintain an id themselves. On Bixby, there is a BIxby User Id, but the user must give permission to your capsule to access it.

As a developer, you can go further by linking an account in your system to your voice application, however, depending on the platform you are working on, and the operations you are enabling on behalf of the user, you should consider whether the operation is appropriate or should be gated via some sort of multi-factor authentication.

Select Voice Technology Experts

Certified Alexa Skill Developers, Google Assistant Developers and Bixby Premier Partners know how to handle authentication and security models that provide an engaging voice-first user experience with your customers.

Design and develop voice apps using best practices

#amazonalexa #googleassistant #samsungbixby #voiceassistants #virtualassistants

#SoniBridge #WhetstoneTechnologies

85 views0 comments
Sanjeev Surati, CEO, Whetstone Technologis



The visionary leading a diverse group of talented and experienced people focused on a fun and memorable customer experience

Sanjeev Surati, Certified Alexa Skill Builder
About Us

Our Story

Co-founders Sanj & John are Microsoft veterans.  They have worked on projects for major clients in various industries.  They're also filmakers.  How cool is that? 


They began developing voice apps in 2017 and were selected for Batch2 of the 2018 Playlabs@MIT startup incubator/accelerator program.   

John Iwasz, CTO, Whetstone Technologies



Architecting the future of voice interactions using decades of experience in several industries.

John Iwasz, Certified Alexa Skill Buider in Philadelphia
John Iwasz, AWS Associate Architect Certification

The Team

Sanj & John have selected management team members who bring a balanced set of skills and 

valuable experience to Whetstone Technologies.


Headquartered near Philadelphia, PA, USA 

with remote distributed teams in Boston, MA and Seattle, WA.  

Phone:  610.345.7384


to us

  • Whetstone Technologies LinkedIn
  • Whetstone Technologies Twitter Page
  • Philadelphia Voice Developers

Philadelphia VUX Designers &  Developers Group

Philly VUX Group Meetu

Philadelphia VUX Designers &  Developers Group

Subscribe to Whetstone Technologies Newsletter

© 2019-2020 Whetstone Technologies, Inc. All rights reserved.