Short answer: Trust Onion is a free app that helps verify calls by using rotating codewords. It’s useful for older people and those needing to check requests. Use it to pause and verify calls that seem urgent.
TL;DR
- Trust Onion is a free app.
- It uses rotating codewords to verify calls.
- Helps older people and those needing to check requests.
- Practice with trusted contacts.
What happened?
Trust Onion is a free app designed to help verify calls by using rotating codewords. It’s particularly useful for older people and those who need to check requests that seem urgent. The app includes tools like signed selfies and callback requests to enhance security. By practicing with trusted contacts, users can learn to pause and verify calls that may seem suspicious.
Key facts
| Reported by | Help Net Security |
|---|---|
| Date reported | 02 Nov 2026 |
How it works
Trust Onion uses rotating codewords to verify callers. The app gives trusted groups three changing codewords each minute. Users check the caller by asking them to say the words and compare them. This helps prevent scams where attackers pretend to be someone else.
Timeline
| Date | Event | Source |
|---|---|---|
| 2026-11-02 | Reported by Help Net Security | Help Net Security |
| 2026-11-02 | This Skillmate explainer published | Skillmate |
How to fix it
- Keep the operating system, browser and security software updated.
- Do not open unexpected attachments or install software from unofficial sources.
- Report suspicious files or pop-ups to your IT or security team.
How to detect it
Defenders can look for signs of unusual logins, crashes, or odd logins.
Signs to watch for:
- Unknown programs starting at boot, or new scheduled tasks.
- Security software that was turned off without a reason.
- Unusual outbound connections from a workstation.
What is confirmed
- Reported by Help Net Security
Why it matters
Verification is crucial. Trust Onion helps pause and verify requests, preventing scams and protecting personal information.
Learn the skills behind this story
Want to understand attacks like this and defend against them? Join Skillmate cybersecurity training or practise hands-on in Skillmate Labs.
FAQ
What is a codeword?
A codeword is a changing word or phrase that helps verify who you are talking to. It changes every minute to keep the conversation safe.
How does Trust Onion work?
Trust Onion works by giving trusted groups rotating codewords. These codewords help verify calls and messages, ensuring only people in the group can communicate safely.
Is Trust Onion free?
Yes, Trust Onion is a free app available for macOS, iOS, and Android.
Can Trust Onion help with scams?
Yes, it can help by verifying calls and messages. It advises caution and provides examples of reported scams to help users recognize potential threats.
Sources
- Product showcase: Trust Onion uses rotating codewords to verify callers (Help Net Security)
How we wrote this: facts come from the sources above. An on-prem AI model drafted the plain-English parts and every sentence was checked against the sources; unsupported sentences were removed. MITRE mapping is our own judgement.






