Trust Onion’s main defense against impersonation calls is a simple prearranged check: members of a trusted group see three codewords that change every minute, and a caller must say them before the recipient reveals or compares the phrase. Help Net Security’s November 2 walkthrough describes the app’s group setup, codeword timer, invitation and verification controls, as well as a callback request that can bring another trusted contact into the decision. Help Net Security’s walkthrough
That mechanism is a challenge-response aid, not proof of a caller’s civil identity. The app listing says the words are generated on the device, work offline and are shared across group members’ phones; it also says users should compare the words privately rather than read them to the caller. Those are developer-described properties, not independently measured security results. The App Store listing
The arrangement also creates a clear adoption constraint: everyone who may need to verify a request must join the group beforehand. Help Net Security reports that a practice call may help an older user learn the process, while the app listing describes joining through an invite code or QR scan and says basic use does not require an account. A codeword check therefore cannot rescue a family member who has not been enrolled or who cannot access the app at the moment of the call.
Trust Onion adds a second, more involved option called a Proofie. The walkthrough reports that it combines a live selfie with a passkey-based signature and can be shared by link or QR code. The app listing says the signature covers the photo, time and location, and claims that later edits fail verification. But Help Net Security also notes that anyone with the link or QR code may be able to view the Proofie; deleting it takes the link offline, while copies already saved by recipients remain available. That makes sharing controls and location exposure part of the deployment decision, rather than incidental details.
The evidence supports Trust Onion as a structured pause-and-check workflow for trusted groups. It does not establish that the product independently authenticates callers, defeats every voice-cloning attack or is ready for use without prior setup and user training.