Are you comfortable taking & uploading a picture of yourself on a webpage for authentication?

@hiramfromthechi Definitely understand what you mean. Most biometric auth on devices today (e.g. Apple Face ID) stores the biometric data purely on the device and runs comparisons on the device too -- so the biometric info itself never leaves the device (would definitely suggest looking into the FIDO Alliance). As for how a unique face print could be generated that can't be reverse engineered -- it's sort of like hashing (like you can generate the hash of a password -- which you cant generally use to get back the original password string). The same can be done with faces using a neural network trained to differentiate between faces. It generates an embedding vector whose distance from other embedding vectors tells you whether they're of the same person or not -- but can't actually be used to get back the original face/image -- unless you can brute force using generated images, which is even more difficult than brute forcing text strings).