About us

Prove you're real, without giving up your privacy.

ToTóo was built to solve a simple, urgent problem: when you talk to someone online, how do you know they are who they say they are?

🗣️How to say it

To·Tóo /to.toˈʔo/

ToTóo is borrowed from Tagalog and Hiligaynon, where totóo means "true", "real", and "trustworthy" — exactly what identity verification is about. The name is pronounced "to-to-OH" (with a glottal stop before the last syllable), not "too-TOO" which is an unrelated Tagalog word.

Our mission

We believe identity verification should be as easy as sharing a link and as strong as a government ID check. We also believe it should not require handing over sensitive documents to every service you use. ToTóo binds real identity to cryptographic proof, then gets out of the way.

What we stand for

These principles guide every product decision we make.

Trust by design

We verify people, not passwords. Every interaction is built on cryptographic proof instead of trust in a username.

Privacy first

Raw documents and biometric data never reach our servers. Encryption happens in the browser, on the user's device.

You own your identity

Your identity key lives in your device's secure hardware. We cannot revoke it, reset it, or use it without your consent.

Open standards

We build on FIDO2 / WebAuthn, AES-GCM, and open-source libraries. No proprietary magic, no lock-in.

Who we are

ToTóo is an independent company. We are funded by the people who use our product, not by selling data.

The ToTóo team

Builders & operators

A small group of security engineers, product designers, and privacy advocates working to make high-assurance identity verification accessible to everyone.

Want to know more?

Read the security details or reach out. We are happy to share how ToTóo works under the hood.

Security overview Contact us