A trusted group is ready.
Members of the branded group see the same three current codewords on their own phones. The words are calculated locally and refresh every 60 seconds.
Give any company or group a private way to know who is really on the other end of a sensitive conversation. Trust Onion, in your name and your language.
Wealth management firms, insurance companies and private family offices are examples, not limits.
Trust Onion White Label is a customizable codeword verification tool for wealth management firms, insurance companies, private family offices and any other company or group. Each trusted group shares three codewords generated locally on its members’ devices. All three rotate every 60 seconds, even without an internet connection. Ask the caller to give all three current words first; compare them privately on your own phone. Never read your words to an unverified caller.
Members of the branded group see the same three current codewords on their own phones. The words are calculated locally and refresh every 60 seconds.
The caller gives all three live words first. The recipient checks all three against their own phone and never reads or reveals the displayed words to an unverified caller.
If all three words match, continue with your usual controls. For higher-stakes moments, deployments that include Proofies™ can request a passkey-signed selfie and check it in a browser against a previously trusted signing key. If the words do not match, pause and use your established callback path.
A Proofie™ is a selfie signed using your passkey in the Trust Onion app. Use the app to send and verify Proofies, compare the signing key against the person's full public key in your shared group, and check that the exact original photo has not changed since it was signed. A standard P-256 WebAuthn passkey signs after Face ID, fingerprint or device-passcode unlock. The signature must carry both user-presence and user-verification flags. This is not a crypto-wallet signature. Family codewords work alongside Proofies.
Public by default, under your control. Proofie photos and signed records are stored securely on Amazon Web Services (AWS). A Proofie is public by default: anyone with its link or QR code can view the photo and signed record. You can add a password to make a Proofie private, or delete it at any time. Deleting a Proofie removes its photo and signed record from our AWS storage and takes its link offline, but cannot recall copies someone has already downloaded or saved.
Trust Onion can be tailored for any company or group. These three examples show how the same verification flow adapts to different relationships.
For wealth management firms, codeword verification gives clients a private check before a wire instruction, new beneficiary or request outside the familiar pattern.
See how it works for wealth management firms
For insurance companies, a branded codeword tool gives policyholders a checkpoint when a claims handler, broker or service representative calls about a consequential claim or payment.
For private family offices, rotating codewords help principals, investment staff and trusted vendors check a request involving money, access or confidential information.
The same branded verification can be tailored to your people, your conversations and the features you need. The three settings above are examples, not the only places Trust Onion can be used.
White label means the experience carries your visual language and the words your audience already understands. The feature set is customizable too: choose the verification features that fit your audience, including whether to offer Proofies and sharing. The Trust Onion name does not need to sit between you and the relationship.
Speak to a specialistWith Trust Onion White Label, an adviser or representative gives all three current codewords first. The client checks them privately in the trusted group before acting on a sensitive request, such as a wire instruction or beneficiary change. The words rotate every 60 seconds. This is an additional check, not a replacement for existing approval controls.
Yes. An insurer's representative gives all three current codewords first, and the policyholder checks them privately in the branded group before sharing information or following a request about a claim or payment. The words rotate every 60 seconds, even without an internet connection.
The family office or trusted contact gives all three current codewords first. The principal or designated approver checks them privately before acting on a request involving money, access or confidential information. Deployments that include Proofies can add a passkey-signed selfie that recipients check in a browser; a previously trusted full public key lets them recognize later Proofies from that same key. Proofie photos and signed records are stored securely on AWS. They are public by default; the owner can add a password to make one private or delete it.
No. Wealth management firms, insurance companies and private family offices are examples. Any company or group can tailor the branding, language and feature set of Trust Onion White Label, including whether to offer Proofies and sharing.
“Before we proceed, let’s make sure we are speaking to the right person.”
That sentence belongs in a firm’s culture. A white label experience gives it a clear, repeatable place to live.
Bring your audience, your risk moments and your existing client experience. We will show you how three rotating codewords and your choice of additional features can fit.
Using something from this page? Please credit Trust Onion and link back.
Codeword Verification for Firms & Family Offices — Trust Onion. https://trustonion.io/white-label