ToTóo, explained simply.
A link you send. Their face to unlock it. Proof that they're real — without needing them to install anything.
What is ToTóo?
ToTóo is a tool that lets you prove who you are to someone else using just your phone — no app download.
If you're the Requester, you generate a link and send it to the person you want to verify. If you're the Verifier, you open the link, tap your fingerprint or face scan, and they get a cryptographic confirmation that you're real.
"Are you really who you say you are?"
Proved. In 30 seconds.
How it works
Three simple steps, all from your browser.
You create a link
Pick what you want verified (name, photo, ID-backed attributes) and click generate. You get a one-time URL.
They open it & tap
They open the link on their phone, see what you're asking for, and confirm with Face ID or fingerprint.
Both get proof
You see they're verified. They see you confirmed. A cryptographic receipt proves it happened.
Trust levels
Not all verifications are equal. Here's what each level means.
Self-Declared
Create a profile and bind it with your device face or fingerprint — no document upload needed.
Proves
- •The same device and person registered this profile and confirms it at each check — a live face or fingerprint unlocks it every time.
- •The name on the profile has stayed the same for this identity.
Does not prove
- ×It does not prove the person's legal name.
- ×It does not prove that only one person could create this identity — one person can register multiple profiles, and the same name is not checked against any record.
- ×It does not prove anything backed by an official document.
Document Verified
Scan a government ID and complete the face match.
Proves
- •A government ID was photographed and checked for authenticity.
- •The photo on the ID matches the face of the person who completed the check.
Does not prove
- ×The face match applies to the verification moment — it does not confirm who is present in later conversations.
- ×It does not prove the person owns any particular chat or marketplace account.
Full Verified
Complete ID verification with face match and liveness.
Proves
- •A government ID was photographed and checked for authenticity.
- •A live person was present at the time of verification — face match plus liveness.
Does not prove
- ×The liveness check applies to the verification moment — it does not confirm who is present in later conversations.
- ×It does not prove the person owns any particular chat or marketplace account.
In-Person Verified
Meet in person and scan each other’s code while both of you are present.
Proves
- •Two people were face-to-face and both confirmed each other in person, on the spot.
Does not prove
- ×It applies to the in-person meeting that was recorded — it does not carry over to remote conversations.
- ×It does not prove the identity of anyone who did not appear in person.
Available only in the in-person flow, where both people are in the same place.
Start at L1 — no document upload needed. Add a document check for L2/L3, or meet in person for L4. How we handle documents and who processes them.
The tech (in plain English)
We use the same security standards as online banking. Here's what that means for you.
Biometric keys
When they tap their fingerprint, their phone generates a unique cryptographic key. That key is bound to their face or finger — it can't be copied or stolen.
Encrypted documents
If they upload a passport, it gets encrypted in their browser before it ever reaches our server. We literally cannot read it.
Share only what you want
The person being verified chooses exactly what to share. Want to prove you're over 18 without sharing your exact birth date? You can.
Things to know (early access)
ToTóo is in early testing. It works, but there are some rough edges:
- •Face ID / fingerprint only works on Safari (iPhone/iPad) and Chrome (Android). Other browsers may fall back to a PIN or security key.
- •The link expires after 15 minutes. If they don't open it in time, you need to generate a new one.
- •Document scanning works best with well-lit, flat documents. Blurry or angled photos may not scan correctly.
- •After verifying, the data is stored securely but not deleted automatically — you can revoke access at any time.
- •The app is a Progressive Web App (PWA). It runs entirely in the browser — there's no app store version yet.
- •This is a work in progress. Things may break. Your feedback helps us fix them.
Want to try it?
Create a verification link, send it to a friend, and see it work in under a minute. No credit card. No commitment.
Free during beta. No signup needed for the person you're verifying.