Docs & resources
Guides, white papers and technical background.
Everything your fraud, security and engineering teams need to evaluate and integrate ToothPic — from one-pagers and white papers to architecture and research.
How-to guides
ToothPic Passkey guides
Register your ToothPic Passkey and sign in securely to your favourite services from smartphone and PC.
Passkeys and ToothPic - The Future of Unmatched Online Security
Why Passkeys Are a Game-Changer for Security, and How ToothPic Passkey Provider Takes It to the Next Level Contents How Passkeys Are Revolut…
Easily Register your ToothPic Passkey and Securely Access your PayPal Account from your Smartphone and Pc
Follow our step-by-step guide to effortlessly register your ToothPic Passkey and securely access your PayPal account. Contents Before you st…
Easily Register your ToothPic Passkey and Securely Access your LinkedIn Account from your Smartphone and Pc
Follow our step-by-step guide to effortlessly register your ToothPic Passkey and securely access your LinkedIn account. Contents Before you …
Easily Register your ToothPic Passkey and Securely Access your Amazon Account from your Smartphone and Pc
Follow our step-by-step guide to effortlessly register your ToothPic Passkey and securely access your Amazon account. Contents Before you st…
ToothPic Passkey for Enhanced Security and Easy Web Access
Discover How To Easily Utilize Passkeys For Web Sign-Ins With ToothPic Passkey Passkeys are an easier and more secure alternative to passwor…
White papers
In-depth papers, on request.
Request any paper and our team will send it to you directly.
Concept paper: Moving Trust Down the Stack
Why smartphone-based, hardware-bound authentication is the most durable foundation for the next decade of mobile banking.
Securing Mobile Banking in the AI Era: Hardware-Based Smartphone Device Binding
How hardware-based device binding protects banks from AI-powered threats.
Securing the Future of Digital Identity: Unclonable Identity Based on Smartphones
Why unclonable smartphone identity is the new imperative for digital finance.
Enterprise-Grade Device-Bound Passkeys — The ToothPic Advantage
How ToothPic device-bound passkeys set a new standard in security and usability.
ToothPic Use Case: Banking
Device binding, SCA and fraud prevention for banks and payment providers.
ToothPic White Paper
The technology behind camera-sensor-based authentication.
Brochures
One-pagers to share with your team.
ToothPic for banks & payments
One-page overview: use cases, KPIs, comparison and the 90-day pilot. PDF.
ToothPic Anti-Fraud for Financial Institutions
Two-page brochure: Camera-sensor identity cuts false positives, exposes mules, approves good customers. PDF.
ToothPic Caller Verification
Two-page brochure: deepfake-proof calls in one tap, step by step. PDF.
Research & security notes
The science behind ToothPic.
Is ToothPic Quantum Safe?
ToothPic is made by a quantum-safe component and a digital signature algorithm. Quantum safe digital algorithms exist and can be integrated …
Why your device is unique and what this means for your privacy and security
Device fingerprinting in a nutshell The need to identify and track people in their online activities is as old as the Web itself. Services n…
International Patents and Academic Publications
ACADEMIC PUBLICATIONS Diego Valsesia, Giulio Coluccia, Tiziano Bianchi, Enrico Magli, Compressed fingerprint matching and camera identificat…
On the security of biometric authentication in the mobile ecosystem
Biometric authentication is becoming ubiquitous on mobile devices, where users routinely unlock their smartphone using a fingerprint or the …
Integration
SDKs for iOS and Android.
Integration guide, sample code and an engineer alongside your team. Standard FIDO2 / EC signatures into the IdP you already run.
- Platforms: iOS and Android SDK, OS-agnostic integration.
- Protocols: FIDO2 / U2F certified, ECDSA NIST P-256.
- Identity providers: works with your existing IdP — e.g. Okta, Keycloak, Duende, Microsoft, F5, Shibboleth and any other standards-based provider (non-exhaustive list).
- Data: only public keys leave the device; no photos, no biometrics.
- Hosting: verification service hosted by you or by us.