Summary. CryptoPhoto duces a 2-factor token with photographic images that implement bidirectional authentication during user logins. The photos and passcodes which are stored on end-user tokens are known only to the legitimate issuing organization. Because imposters cannot guess the photos it actively prevents victims from being tricked.