CryptoPhoto

What CryptoPhoto is

CryptoPhoto provides login authentication and transaction signing through mutual authentication. It offers a passwordless option and supports photo matching, biometrics, passphrases and cryptographic tokens. Users can approve sensitive actions with out-of-band transaction signatures, while authentication, signatures and key provisioning can require approval from multiple operators under a two-man rule. The maker describes CryptoPhoto as verifier impersonation resistant and compliant with NIST SP 800-63-3 AAL3. It says the system is designed to block phishing and social engineering. Customers can use shared cloud authentication or deploy virtual or physical appliances; the pricing page says each appliance can manage 100,000 user actions per second. Integration options include API libraries and code samples for Perl, PHP, Python, .NET and Java/J2EE, as well as a Linux PAM module. Listed platforms include Android, iOS, Linux, Windows, web, API and self-hosted. The maker also describes multiple-device support, self-service enrollment and recovery for lost devices. A free plan is listed, alongside per-use pricing of $0.04 per transaction signature and per-user pricing of $1 a year, per user and facility.

Who it suits

CryptoPhoto is aimed at organizations seeking authentication and transaction approval, including banking, government, enterprise, small business and critical infrastructure use cases. Its deployment choices and integrations may also suit cloud, hosting and developer use cases.

Limits

Paid cloud pricing is $0.04 per transaction signature, with unlimited users. The per-user plan is $1 per user, per facility, per year, for 1–100,000 users; listed charges are authentication $1, transaction signatures $0.25, telephone authentication $1, in-person authentication $0.10, and cipher keys $0.10, with unlimited facility usage.

Getting started

1. Visit the CryptoPhoto website.
2. Choose shared cloud authentication or deploy a virtual or physical appliance.
3. Select the free plan or review the listed usage-based and per-user pricing.
4. Integrate using API libraries or code samples, or the Linux PAM module.
5. Use the secure self-service enrollment support.

Verdict

CryptoPhoto combines mutual authentication with transaction signing and offers cloud and self-hosted deployment choices. Review the listed pricing units and integration options to see how they fit your deployment.