> For the complete documentation index, see [llms.txt](https://docs.vida.id/identity-stack/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.vida.id/identity-stack/authentication/introduction/use-cases/proof-of-user-veracity-high-risk-authentication.md).

# Proof of User Veracity (High-Risk Authentication)

Proof of User Veracity is the highest level of authentication, designed for high-risk scenarios that require verification of both the device and the user’s identity. This method utilizes VIDA Phone Token in conjunction with VIDA Face Token, including advanced biometric technologies such as face matching and liveness detection. By ensuring that only a verified user can initiate transactions, this method mitigates risks like identity fraud, spoofing, and unauthorized access.

## **Key Features:**

* Combines PKI device authentication, face matching, and liveness detection.
* Protects against identity fraud, spoofing, and tampering.
* Ensures the transaction is initiated only by verified users on trusted devices.

## **Use Cases of Proof of Veracity:**

Proof of User Veracity is ideal for high-risk actions requiring the highest level of security:

### **New Device Registration**

Securely register a new device for account access while ensuring that only the account holder can authorize the addition of new devices.

Challenge:

* New device registration is a sensitive action that can give unauthorized users access to accounts if not properly verified.
* Insecure processes may allow attackers to add their own devices, potentially leading to account takeover or fraud.

Solution with VIDA Proof of Veracity:

* **Verifiable Device Registration**: Before allowing a new device to be registered, VIDA Proof of Veracity confirms that the device request is legitimate and initiated by the authorized account holder.
* **Multi-Factor Authentication**: The process requires both device verification (through VIDA Phone Token) and user authentication (via biometrics) to ensure both the user and the device are trustworthy.

***

### Forgot Password and Reset Password

Securely authenticate a user's identity during the account recovery process, ensuring that only the legitimate account holder can reset their password.

Challenge:

* Password recovery processes are a prime target for attackers seeking to gain unauthorized access to accounts.
* Weak or inadequate identity verification methods can allow malicious actors to reset passwords and take control of accounts.

Solution with VIDA Proof of Veracity:

* **Multi-Factor Authentication**: The recovery process requires multiple layers of verification with device verification (through VIDA Phone Token) and user authentication (via biometrics) to ensure the person requesting the password reset is the account holder.