From link to verified in 30 seconds.
The whole flow runs in your browser and theirs. No app to install. No documents uploaded in plain text. No password to forget.
You generate a link.
From your ToTóo dashboard, pick what you want verified — name, photo, ID-backed attributes — and click generate. ToTóo creates a one-time link with a cryptographic challenge baked in.
The link is signed by your authenticator. Anyone who tampers with it will be detected by the recipient's browser.
You send it through any channel.
WhatsApp, iMessage, email, SMS, carrier pigeon — whatever you already use. ToTóo works over a normal URL. The link encodes the verification request, not a secret.
Even if the link is intercepted, it can only be opened once. The challenge expires in minutes.
They tap and verify with their fingerprint.
They open the link, review what you're asking for, and confirm. The fingerprint never leaves their device — the device signs a challenge, and ToTóo verifies the signature cryptographically.
This is FIDO2 / WebAuthn, the same standard that protects online banking and government services. A photo, a recording, or a copy of someone's fingerprint cannot pass.
You both get a verified result.
The verification is recorded. You see them in your verified list. They see you in theirs. The cryptographic receipt proves it happened — no one has to take anyone's word.
If you ever need to revoke access, you can. The verification record is portable and under your control.
Both of you can share. Both of you can verify.
Verification isn't a one-way street. You can share your own name, photo, or ID-backed attributes — and the recipient can verify them the same way they verify anyone else. Selective disclosure is on by default: share only what you choose.
You control what you disclose. The recipient controls what they accept. Either side can decline to share or decline to accept — no pressure, no leakage.
Not all verifications are equal.
ToTóo supports four levels of identity assurance. Each level builds on the last — from self-reported to cryptographically proven to physically confirmed.
Self-Declared
Create a profile and bind it with your device face or fingerprint — no document upload needed.
Proves
- •The same device and person registered this profile and confirms it at each check — a live face or fingerprint unlocks it every time.
- •The name on the profile has stayed the same for this identity.
Does not prove
- ×It does not prove the person's legal name.
- ×It does not prove that only one person could create this identity — one person can register multiple profiles, and the same name is not checked against any record.
- ×It does not prove anything backed by an official document.
Document Verified
Scan a government ID and complete the face match.
Proves
- •A government ID was photographed and checked for authenticity.
- •The photo on the ID matches the face of the person who completed the check.
Does not prove
- ×The face match applies to the verification moment — it does not confirm who is present in later conversations.
- ×It does not prove the person owns any particular chat or marketplace account.
Full Verified
Complete ID verification with face match and liveness.
Proves
- •A government ID was photographed and checked for authenticity.
- •A live person was present at the time of verification — face match plus liveness.
Does not prove
- ×The liveness check applies to the verification moment — it does not confirm who is present in later conversations.
- ×It does not prove the person owns any particular chat or marketplace account.
In-Person Verified
Meet in person and scan each other’s code while both of you are present.
Proves
- •Two people were face-to-face and both confirmed each other in person, on the spot.
Does not prove
- ×It applies to the in-person meeting that was recorded — it does not carry over to remote conversations.
- ×It does not prove the identity of anyone who did not appear in person.
You can upgrade at any time. Start at Level 1, scan your ID when ready, and meet in person for the highest assurance.
What we never see.
During the entire flow, ToTóo never has access to:
- The fingerprint or biometric — that stays in the device's secure hardware
- The private half of any identity key — generated and stored on-device only
- Raw ID documents — encrypted in the browser before they ever leave
- Anything the recipient declines to share — selective disclosure is on by default
Try it with someone right now.
The fastest way to understand ToTóo is to use it. Create a link, send it to a friend, and watch the verification happen.