CryptoPhoto
CryptoPhoto provides login authentication and transaction signing through mutual authentication.
What CryptoPhoto is
CryptoPhoto provides login authentication and transaction signing through mutual authentication. It can remove passwords while retaining that approach, using factors such as photo matching, biometrics, passphrases, and cryptographic tokens. Users can approve sensitive actions with out-of-band transaction signatures, and authentication, signatures, or key provisioning can require multiple operators under a two-man rule. The maker describes CryptoPhoto as verifier-impersonation resistant and compliant with NIST SP 800-63-3 AAL3, and says its design addresses phishing and social engineering. It describes support for multiple devices, self-service enrollment, and recovery after a device is lost. Customers can use shared cloud authentication or deploy virtual or physical appliances; the pricing page says an appliance can manage 100,000 user actions per second. Integrations include APIs and code samples for Perl, PHP, Python, .NET, and Java/J2EE, plus a Linux PAM module. Listed platforms include Android, iOS, Linux, Windows, web, API, and self-hosted deployments. A free plan is listed, with usage-based and per-user options.
Good
- Supports passwordless authentication
- Offers out-of-band transaction signatures
- Allows two-man approval rules
- Provides API libraries and a Linux PAM module
- Supports cloud or self-hosted deployment
Watch out
- Pricing is partly usage-based or per-user
- Appliance deployment requires customer infrastructure
- The maker, not an independent source, states compliance
Who it suits
It suits organizations needing passwordless login, transaction approval, or multi-operator controls. The maker lists banking, government, enterprise, infrastructure, education, cryptocurrency, and developer use cases.
Verdict
CryptoPhoto covers authentication, transaction signing, recovery, and deployment choices across many platforms. Its pricing structure and deployment model should be matched to the organization’s operating requirements.
Plans and prices
From CryptoPhoto's own pricing page, checked 11 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Cloud-Pricing — Per-Use | $0.04, paid once | unlimited users · Per transaction signature |
| Per-User pricing | $1 a year | 1–100,000 users · authentication $1 · transaction signatures $0.25 · telephone auth $1 · in-person auth $0.10 · cipher keys $0.10 · unlimited facility usage · Per-user, per-facility, per-year |
The facts
Each one read from CryptoPhoto's own pages, with the date it was checked.
Where it runs
- Appliance capacity
- The pricing page says each appliance can manage 100,000 user actions per second.checked 11 Oct 2026
- Multi-operator approval
- Authentication, transaction signatures, and key provisioning can require approvals from multiple operators under a two-man rule.checked 11 Oct 2026
What it does
- Deployment
- Customers can use shared cloud authentication or deploy their own virtual or physical appliances.checked 11 Oct 2026
- Integrations
- The maker offers API libraries and code samples for Perl, PHP, Python, .NET, and Java/J2EE, plus a Linux PAM module.checked 11 Oct 2026
- Passwordless
- The product offers an option to remove passwords while retaining its authentication approach.checked 11 Oct 2026
- Phishing defense
- The maker says CryptoPhoto's mutual authentication is designed to block phishing and social engineering.checked 11 Oct 2026
- Privacy claim
- The maker says its sites, services, and apps do not store personal or client usage information.checked 11 Oct 2026
- Product
- CryptoPhoto provides high-security login and transaction signing using mutual authentication.checked 11 Oct 2026
- Recovery
- The maker describes support for multiple devices and secure self-service enrollment and lost-device recovery.checked 11 Oct 2026
- Security standard
- The maker describes CryptoPhoto as compliant with NIST SP 800-63-3 AAL3 and verifier impersonation resistant.checked 11 Oct 2026
- Transaction signing
- Users can approve sensitive actions with out-of-band transaction signatures.checked 11 Oct 2026
- Who it serves
- The maker lists banking, government, enterprise, small business, cloud and hosting, critical infrastructure, websites, education, cryptocurrency, and developer use cases.checked 11 Oct 2026
Alternatives to CryptoPhoto
- 1
Duo Mobile
Free planAndroidiOS7.7From $3 a month - 2
HYPR Authenticate
AndroidiOSWebAPI7.5From $3 a month - 3
LoginTC
Free planAndroidiOSWebAPI7.5From $36 a year - 4
IBM Verify
AndroidiOSWebAPI7.3From $15,899.29 a year - 5
OpenOTP Authentication Server
Free planAndroidiOSLinuxmacOS7.3Free plan - 6
Protectimus MFA
Free planAndroidiOSWebAPI7.3From $2 a month