Sign In Get Started
Login with ProntoID

One button.
A real person.
Zero personal data.

Give your users a sign-in button like Google or Meta — except every account belongs to a verified human, users share only what you actually need, and a face match protects the moments that matter.

Add It to Your Platform Read the Docs
OpenID Connect standard
Verified humans only
Face match for recovery
The Problem

Logins prove an email,
not a person

Today’s sign-in options leave platforms with a choice between friction, data they’d rather not hold, and accounts they can’t trust.

Social Logins Over-Share

Sign in with Google or Meta hands every site a name, email, and profile — and the provider learns which sites its users visit. Users increasingly hesitate before clicking.

Passwords Get Stolen

Passwords are reused, phished, and leaked. SMS and email codes add friction without stopping SIM swaps — and account recovery is where most takeovers happen.

Anyone Can Sign Up

Bots, duplicate accounts, minors, and bought or sold accounts all pass an email check. You find out who the account really belongs to only after something goes wrong.

How It Works

Works like the buttons
you already know

Standard OAuth 2.0 and OpenID Connect. If you’ve integrated Google or Meta sign-in, you already know the flow — the difference is what comes back.

1
User clicks “Login with ProntoID”
Your site redirects to secure.prontoid.com with your client ID, the scopes you need, and a PKCE challenge.
2
They sign in to ProntoID
A passkey on their phone or laptop — no password. On a new device, a live face match against their verified ID first.
3
They see exactly what you’ll get
A plain-language consent screen lists every claim you requested. If you asked for a verified claim they don’t have yet, ProntoID runs the ID check inline.
4
You receive a one-time code
ProntoID redirects back to your registered URL with a short-lived authorization code. Unregistered redirect URLs are refused.
5
Your server gets a signed ID token
Exchange the code server-to-server for a signed token holding a private, per-site user ID and the approved claims. No personal data required.
PHP · Login with ProntoID 
// 1. Send the user to ProntoID
$url = 'https://secure.prontoid.com/oauth/authorize?' . http_build_query([
    'client_id'             => $clientId,
    'redirect_uri'          => 'https://yourplatform.com/auth/prontoid',
    'response_type'         => 'code',
    'scope'                 => 'openid verified_human age_over_18 country',
    'state'                 => $state,
    'code_challenge'        => $pkceChallenge,
    'code_challenge_method' => 'S256',
]);

// 2. On return, exchange the code (server-to-server)
//    and read the signed ID token:
{
  "iss":            "https://secure.prontoid.com",
  "sub":            "pid_7f3c9e…",   // unique to your site
  "verified_human": true,
  "age_over_18":    true,
  "country":        "CH",
  "amr":            ["passkey"],
  "auth_time":      1762713600
}
What You Can Ask For

Ask for answers,
not documents

Request only the facts your platform needs. Users approve each one, and you never handle the ID behind it.

scope: openid

Private User ID

A stable identifier unique to your platform. The same person gets a different ID on every other site, so accounts can’t be linked across platforms.

scope: verified_human

Verified Human

Confirms the account belongs to a real person who passed an ID check and liveness scan — and that they hold only one account with you.

scope: age_over_18 · age_over_21

Age Threshold

A yes or no for the age you need. Built for age-assurance rules without collecting or storing a date of birth.

scope: country

Country of Residence

The country from the verified document — for geo-restricted services, tax rules, and regional compliance.

scope: verified_name

Verified Legal Name

The name on the user’s ID, shared only when the user explicitly agrees. For contracts, payouts, and regulated services.

scope: email

Email Address

Optional. Request it only if you need to contact the user — and they can still decline while signing in.

Security

Effortless every day.
A face match when it counts.

A passkey proves someone unlocked a device. A face match against a verified ID proves it’s the same person who opened the account. Login with ProntoID uses each where it fits.

Passkey Sign-In

Everyday sign-in uses passkeys — phishing-resistant, password-free, and unlocked with the device’s own face or fingerprint. No camera prompt, no codes.

Face-Match Recovery

Lost phone? The user looks at the camera and is matched against their verified ID. No SMS codes to SIM-swap, no support agent to talk into resetting the account.

New-Device Check

The first sign-in on a new phone or laptop requires a live face match. A stolen password or a cloned session is not enough to get in.

Step-Up for Risky Actions

Before a payout change, a large withdrawal, or an account deletion, request a fresh face match. The ID token tells you it happened, and when.

Stops Account Resale

Periodic re-checks confirm the person using a verified account is the one who verified it — closing the gap where accounts get sold, shared, or handed to minors.

Hardened Protocol

Authorization code flow with PKCE, exact-match redirect URLs, single-use short-lived codes, and signed tokens you verify against our published keys.

1 Button
Standard OAuth 2.0 / OIDC integration
0 Passwords
For your users to remember or you to store
1 Person
Per account — no bots or duplicates
0 IDs
Documents your platform ever has to handle
Who It’s For

Better for users.
Better for platforms.

for: users

Take Control of Your Data

Sign in anywhere without handing over your email, name, or birthday. Verify once with ProntoID and prove what a site needs — nothing more.

  • No new password for every site
  • Share “over 18” instead of your date of birth
  • A different private ID on every platform
  • If a site is breached, your personal data was never there
  • Recover your account with your face, not an SMS code
for: platforms

Build Trust Without Holding Data

Every sign-up is a real, unique person, and you stay out of the business of storing IDs and personal data.

  • Higher conversion — one click instead of a sign-up form
  • Bots, duplicates, and fake accounts filtered out at the door
  • Age and country checks without storing documents
  • Smaller GDPR footprint and less to lose in a breach
  • Fewer takeovers and recovery tickets
Comparison

How it stacks up

Login with ProntoID next to social login and classic passwords.

Password + 2FA Social Login Login with ProntoID
Proves a real, unique person No No — an email account Yes — verified ID + liveness
Age or country without raw data No No Yes — yes/no claims
Personal data shared with you Whatever the form asks Name, email, profile Only approved claims
Cross-site tracking of users Via reused email Same identity everywhere Blocked — per-site IDs
Account recovery Email or SMS codes Depends on the provider Face match against verified ID
Step-up for risky actions Another code Limited Fresh face match
Use Cases

Wherever “who’s really
behind this account” matters

Age-Restricted Platforms

Meet age-assurance rules such as the UK Online Safety Act with a one-time check and an age_over_18 claim on every sign-in — no documents stored on your side.

Creator Platforms

Make sure the creator signing in is the creator who verified. Protect payout changes with a face match and stop verified accounts being sold or shared.

Dating & Social

Every profile is a real, unique person. Cut catfishing, bots, and ban evasion without asking members to hand you their ID.

Marketplaces

Verified buyers and sellers, one account each. Step up to a face match before high-value listings, withdrawals, or bank-detail changes.

Communities & Forums

One person, one account. Bot-free sign-ups and pseudonymous users who are still accountable humans.

Fintech & Payments

Passwordless sign-in for everyday use, with face-matched step-up and recovery that meets the bar for strong customer authentication.

FAQ

Common
questions

Everything you need to know about Login with ProntoID. Can’t find the answer? Contact us.

Yes. It uses the OAuth 2.0 authorization code flow with PKCE and returns a signed OpenID Connect ID token. Any OIDC client library — or the same code you wrote for Google or Meta sign-in — works with a new issuer, client ID, and secret.
Only the claims you request and the user approves on the consent screen. The default is a pseudonymous user ID that is unique to your platform. Age, country, or verified name are separate scopes — you can confirm a user is over 18 without ever receiving their date of birth.
No. Basic sign-in only needs a ProntoID account. If you request a verified claim such as age_over_18 and the user hasn’t verified yet, ProntoID runs the ID check and liveness scan inline, then returns them to you with the claim.
Everyday sign-in uses a passkey, so it is fast and free of camera prompts. A live face match against the user’s verified ID is used where it matters: account recovery, signing in from a new device, and any high-risk action you choose to protect, such as changing payout details.
Like any sign-in provider, ProntoID knows a sign-in happened in order to complete it. We don’t sell that information or use it for advertising, and because every platform receives a different user ID, platforms cannot link the same person across sites.
Yes. Most platforms add “Login with ProntoID” alongside email and password, then let existing users link their account. You can also require it only for specific actions — for example, age-restricted areas or creator payouts.
Related Services

Part of the ProntoID ecosystem

KYC Verification

The ID check and liveness scan behind every verified claim. Run it inline during sign-in, or on its own through the API.

Learn More

ProntoVault

A face-locked personal vault. Keep private files for yourself, or send one to a named, face-verified person.

Learn More

ProntoDeliver

Identity-gated file delivery for platforms. Files unlock only after a live ID check and liveness scan.

Learn More

Every account,
a real person

Add Login with ProntoID next to your existing sign-in and start onboarding verified users without collecting their personal data.

Add It to Your Platform Read the Docs

Brooks & Keitt Sàrl  ·  Place du Midi 30, 1950 Sion, Switzerland