Verification without identification.
A website can confirm you are over 18 without learning who you are. Your own bank answers with a signed yes or no, and that is all the website receives.
What a site normally collects
- Name
- Date of birth
- Address
- ID scan
What it receives with SiloAuth
- claim
- age_over_18
- answer
- true
- signed by
- the user's bank
Illustration with fictional data.
Working prototype. It runs end to end today with fictional banks and a simulated face comparison. It is not yet live with a real bank.
Who are you?
SiloAuth works differently for each of the three groups it connects. Choose yours.
Stop building databases attackers want.
You may need to know a visitor is over 16 to join a social network, or holds a clean driving licence to hire a car. You don't want their passport scan. You just want the answer. SiloAuth runs the check for you, so there is nothing to store and nothing to leak, and it costs a small fee per check.
More for websites and platforms is coming soon.
Earn from the data you already hold.
You have already verified your customers or citizens. SiloAuth lets you answer a yes or no question from that record, without releasing any of it, and you share in the fee for every check.
More for banks and authorities is coming soon.
Prove a fact without handing over who you are.
Today, proving your age or where you live means uploading a passport or typing a date of birth into a website you barely know. With SiloAuth your own bank, or your licence or passport authority, answers instead. The website gets a yes or no and nothing else.
How it works
Try it yourself. These are made-up websites, each asking one question.
A social network must check new members are over 16. It learns that one fact and nothing about who you are.
The site asks one question
No date of birth, address or ID.
Your phone makes a one-time code
It works once and expires in two minutes.
You type the code into the site
The site sees the code and nothing else.
You tap the matching number
Your bank checks its own records and answers yes or no.
The site receives one answer
Nothing sensitive is sent to the site. It keeps no ID, birth date or address.
Bramble
Create your account
Confirm you're over 16
SiloAuth
Make a one-time code
Your one-time code
K7M2QX
Type it into the website.
Are you over 16?
Tap the number shown on the website.
Answer sent
Yes
Illustration with a fictional app and fictional data. Nothing you type leaves this page.
The website receives the answer and nothing else.
Set up takes a few minutes, once.
Install the app
Unlock it with your fingerprint or face. This creates a key that never leaves your phone's secure chip.
Connect your bank
Your banking app gives you a one-time code. Or link a driving licence or passport with a short face check.
That's all
Next time a site asks, make a code, type it in and tap the matching number.
Who sees what
| Website | SiloAuth | Your bank | |
|---|---|---|---|
| Your name and date of birth | Cannot see | Cannot see | Sees |
| Which website asked | Sees | Sees | Cannot see |
| Your face scan, if asked for | Cannot see | Cannot see | Issuing authority only |
| The yes or no answer | Sees | Sees | Sees |
How we keep your identity safe
Your details stay with your bank
The website never sees your name, date of birth or address. It receives a signed yes or no.
No website name on screen by default
You see who is asking on your own phone, before you approve anything.
Keys stay on your phone
Approvals are signed by a key held in the phone's secure chip and unlocked by your fingerprint or face.
You pick the number
Every approval needs the number shown on the website, so a stranger's request can't be approved by accident.
A trusted person can be asked too
For people who want extra protection, a relative or carer can be asked to agree before sensitive checks go through.
Face checks stay with the authority
When a face check is needed, the scan goes to the authority that holds your photo. It never reaches the website.
Where we are
Working today
- Code, approval and signed answer, end to end
- Android app with fingerprint or face approval
- Linking a phone to a bank
- Trusted-person approval
- Demonstration with fictional banks
Still to do
- A real bank partner
- Real face matching
- Independent security test
- Certification
- iPhone app
We are mapping the design to ISO/IEC 27566-1 and IEEE 2089.1. We hold no certification yet.
Talk to us
Tell us which describes you and we will reply personally.
Or write to hello@siloauth.com.