Stytch, which is building APIs for passwordless authentication, raises a $90M Series B at a $1B valuation led by Coatue, following a $30M Series A in July
Compromised passwords are responsible for some 80% of all data breaches, according to some estimations, leading to a mass industry-wide push …
Context & Ripple Effects
Stytch's Series B comes just four months after its $30M Series A led by Thrive Capital at a reported $200M-plus valuation — a five-fold valuation jump inside a single quarter, now with Coatue instead of Thrive at the top of the cap table. The bet rides on the same breach math the company itself cites: compromised passwords behind roughly 80% of breaches, driving an industry-wide push to eliminate them.
The capital is crowding into a space where the incumbents are still password-centric: 1Password raised $100M at a $2B valuation the same month as Stytch's Series A, and would go on to a $6.8B round months later. Stytch's API-first approach attacks the same problem from the infrastructure layer rather than the vault.
First-order effects
- Stytch now has $120M raised and a $1B valuation, with Coatue — a firm also writing nine-figure checks into Anthropic and AI data-center infrastructure — as its lead; the company can price its passwordless APIs aggressively against incumbents.
- Coatue's lead positions Stytch as the developer-infrastructure bet in a portfolio otherwise weighted toward AI compute and models.
Second-order effects
- 1Password, which scaled from a $2B valuation in July 2021 to a $620M round at $6.8B by January 2022 on the strength of its 100K+ paying business customers, now faces API-native passwordless rivals that remove the password rather than managing it — pressuring the vault model's long-term positioning.
- Fellow passwordless player Secret Double Octopus, which raised its own $15M Series B in 2020 for workplace passwordless deployment, gains a validation datapoint but also a far better-funded direct competitor in Stytch.
Third-order effects
- If the pattern holds, authentication splits into two camps — password managers that store credentials (1Password, and adjacent secrets managers like Akeyless) and API layers that eliminate them (Stytch, Secret Double Octopus) — with capital and enterprise buyers gradually shifting toward elimination over storage.
- Breach-driven pressure, with passwords implicated in the large majority of incidents, points toward passwordless becoming default enterprise infrastructure, consolidating identity around whoever owns the developer integration point.
The trend: Authentication is shifting from password-management products to passwordless infrastructure APIs, with mega-funds like Coatue pricing the elimination-of-passwords thesis at unicorn levels within months of first institutional money.