Sign in with Attestto
One click. No passwords. No usernames.
Your identity lives on your device, not in a company database. Sign in to any website with a tap, keep every login private, and get warned before you hand your data to a fake site.
How it works
Three steps, then you are in.
Nothing to create, remember, or leak.
- Add the Attestto extension to your browser.
- On any site, click Sign in with Attestto.
- Approve with your fingerprint. That is it.
No password to steal
There is nothing to phish, because there is no password to enter.
A different identity on every site
No one can link your logins or follow you across the web.
Carry your real credentials
Your ID, license, or age, sharing only what a site needs.
A shield, not just a login
Attestto warns you before you type your data into an unsafe or fake site.
Why Attestto
Is this just Google login, or passkeys?
No, and here is the honest difference. Attestto is a passwordless, username-less login that hands you a portable identity you control, different on every site so no one can correlate you, that also carries real verifiable credentials and warns you off phishing and insecure sites.
Compared to passkeys
Passkeys log you in but do not give you an identity. Each one is locked to a single site and holds no information about you, and most sites still ask for your email first. Attestto is one portable identity across sites that also carries credentials, and the website never has to build the cryptography.
Compared to crypto wallets
Wallets like MetaMask feel similar, but they use the same key on every site, so anyone can track you across the web, and they hold a balance, not an identity. Attestto uses a different, unlinkable identity per site and carries real credentials instead of tokens.
Compared to other identity wallets
Most are phone apps that make you scan a QR code, and they only store credentials. Attestto works right in your browser with one click, and it actively protects you with a trust bar and warnings on unsafe sites.
Compared to Google or ID.me
Federated logins let a central company watch where and when you sign in, and they keep a database that can be breached. With Attestto, the keys stay on your device and no one is watching.
At a glance
How Attestto compares
| Feature | Attestto | Passkeys | Crypto wallets | Identity wallets | Google / ID.me |
|---|---|---|---|---|---|
| Identity you hold | Yes, you hold it | No, one per site | Yes | Yes | No, central provider |
| Unlinkable across sites | Yes, unique per site | Yes, per site | No, same key everywhere | Yes | No |
| Carries real credentials | Yes, ID and more | No, login only | No, tokens | Yes | Limited profile data |
| Active phishing defense | Yes, trust bar and warnings | Yes, site bound | Weak | No, passive vault | No |
| No username needed | Yes | No, usually needs email | Yes | No, QR scan | No, needs account |
| Easy for developers | Yes, drop-in button | Hard, server crypto | Yes, JS binding | Hard, mobile flow | Yes, standard |
The extension install
For a simple, throwaway login, native passkeys need no install and win. Attestto earns the download when you want a portable identity, credentials, and real-time protection, not just a login.
About accounts
There is no password or username to remember. A site may still link your Attestto identity to its own record the first time you sign in. Think no credentials to memorize, rather than no account ever.
For developers
Add passwordless identity in an afternoon.
No WebAuthn backend. No password resets. No vendor lock-in. Drop in a button. The extension does the cryptography and hands your site a signed proof it can verify in a few lines.
<!-- 1. Add the button to your page -->
<button data-attestto-sign-in>Sign in with Attestto</button>
<!-- 2. Receive the signed proof the extension returns -->
<script type="module">
window.addEventListener('attestto:signed', async (event) => {
// Send the proof to your server and verify the signature.
await fetch('/api/verify', {
method: 'POST',
headers: { 'content-type': 'application/json' },
body: JSON.stringify(event.detail),
})
})
</script>FAQ
Common questions
Do I need to create an account?
There is no password and no username to remember. A website may still link your Attestto identity to its own record the first time you sign in, but you never invent or type a credential.
What if I lose my device?
You recover with your backup. Attestto uses social recovery, so losing one device does not lock you out, which is the gap that makes plain passkeys risky.
Is it free?
Yes. Attestto is free for individuals, forever, for identity, signing, and verification.
What does a website actually see?
Only the specific proof you approve. Never your keys, and never more than the site asked for.
Is it more secure than a password?
Yes. There is no shared secret to steal, and every sign in is cryptographically bound to the real website, so a fake site cannot reuse it.
How is it different from passkeys?
Passkeys log you in. Attestto gives you a portable identity that also carries credentials and protects you from fake sites.
How do I add it to my site?
You add a button and a few lines to verify the signed proof. See the developer section below and the documentation.
Is it open source?
Yes. The extension and its libraries are open source.
Passwordless, private, and yours.
One identity you control, on every site, with nothing to phish.