Most biometric verification tools are either expensive, require a hardware SDK, or lock you into a proprietary platform. FaceID API is a free-tier REST API that adds face liveness detection to any web or mobile app. Here's exactly how it works.
How the session model works
Your API key never appears in frontend code or in a URL.
Your backend
↓ POST /widget-session (X-API-Key: your_secret_key)
FaceID Worker
↓ Returns { session_id, widget_url }
Your frontend
↓ Opens widget_url in an iframe (no key in URL)
User completes liveness
↓ postMessage({ type: 'FACEID_RESULT', result: {...} })
Your frontend
↓ Receives the result — no raw biometric data
Node.js backend
// Step 1: get a session (server-side only — never in the browser)
const session = await fetch('https://face-worker.faceidentity.workers.dev/widget-session', {
method: 'POST',
headers: {
'X-API-Key': process.env.FACEID_API_KEY,
'Content-Type': 'application/json',
},
body: JSON
Discussion
Say something first
It all starts with you—share your thoughts now.