How Toqen.app works

Try to steal the login. On the left a password leaves three things behind for an attacker; on the right there is nothing to take. Pull the slider through the stages and run the attacks yourself.

Stage Try to steal it
  1. 0
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
Attack
Access

Tap a part of the drawing to open that stage.

Intelligence does not grant access

An AI can be as clever as you like. If there is nothing to steal, cleverness buys no entry. That is the whole idea: instead of guarding secrets better, stop having secrets that can be carried away.

The project toqen.app The mobile client source is open for audit. The demo, the technical documentation and the contacts are on the project site.

What's inside

  1. 1 Try to steal the login · The counters are not decoration. Each one counts the items in that panel that an attacker can carry away.
  2. 2 Where an ordinary login can be taken apart · It is one secret reused at every step. That is what makes the whole chain only as strong as its weakest link.
  3. 3 The same chain without a single transferable secret · Nothing in this chain can be replayed: the signature is valid for one challenge and for nothing else.
  4. 4 Pick an attack and watch what it yields · An honest boundary sits next to the results: a compromised device and a hijacked open session are different problems and need their own answers.
  5. 5 The key is made inside the chip and stays there · This is the reason there is nothing to intercept: the thing that proves who you are was never on the network in the first place.
  6. 6 Access is an event, not a permanent property · The countdown is live. What you see is the remaining lifetime of this grant, not an illustration of one.
Read more The core AI credential problem is solved by removing secrets, not by another attack detector While the industry argues about AI safety, one of the key layers, handing out access, can already be closed. The access-first infrastructure behind Toqen.app has been running since December 2025.

Explorable Explanations

Stage Try to steal it
  1. 0
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
Attack
Access
1 / 6