Moscow UTC+3
The VITON ID sign-in page, captured in September 2026: one card asking for an email address to find or create a VITON ID, with a blue button to continue and links to create an account or get help signing in.

VITON ID is the account behind viton13.com: one sign-in for orders, conversations with the studio and VITO bonuses, with a console for admins and order files encrypted in the browser.

Labels
Internal VITON13's own product
Year
2026
Disciplines
Products
Languages
English, Russian, Spanish, French, Hindi

Overview

viton13.com needed one account for everything a customer does on the site: sign in, follow orders, discuss a service with the studio and keep bonuses. The studio needed one place to answer those conversations, manage members and send consent-based email.

This is VITON13’s own product: I designed and built VITON ID for our own site, and no client commissioned it. The messages on this portfolio run on the same accounts.

  • 13

    digits in a VITON ID, the last one a Luhn check digit

    Source: ID format in the code

  • 10

    cabinet views, plus a console that only admins see

    Source: Cabinet code, 19 Sep 2026

  • 13 VITO = $1

    bonus rate; every account receives 13 VITO once

    Source: Bonus rules in the code

  • AES-GCM-256

    encryption of order files and briefs, in the browser, before upload

    Source: Encryption code and tests, 19 Sep 2026

Approach

I defined the VITON ID number itself: 13 digits for the account type, the registration year, day and month, a five-digit sequence and a Luhn check digit. Members sign in with an email address or that number plus a password (Firebase Identity Toolkit). A new account is confirmed with a code sent by email, disposable and undeliverable email domains are refused, and in any 15 minutes one IP address gets 5 failed sign-ins per identifier and 30 attempts in total.

Around the account I built the cabinet: ten views — Overview, Requests, Messages, the VIT LIVE assistant, Saved, Bag, Orders, Health, Profile and Settings — and an eleventh, the Console, that only admins see and that loads only when opened. There admins read traffic from first-party counters, grant or deduct bonuses with a written reason, suspend or restore members and send consent-based email in batches of 50, each with a signed one-click unsubscribe.

Ordering a service opens a conversation with the studio inside the cabinet; when the studio replies, the customer gets an email, at most once per conversation every 10 minutes. Files attached to a studio order — up to three, 1.5 MB each and 3 MB in total — and the brief are encrypted in the browser with AES-GCM-256 through Web Crypto. Only ciphertext is uploaded; the key travels in the link’s #fragment, which browsers do not send to the server.

Results

The sign-in page is live at viton13.com/viton-id and answers with noindex, nofollow, so it stays out of search results. The cabinet’s copy exists in five languages.

On 19 September 2026 the automated tests for the ID format (11 of 11), the emailed codes (3 of 3), phone linking (5 of 5), the service order flow (10 of 10), VITO bonuses (7 of 7) and the encryption (4 of 4) passed.

What this does not prove

VITON ID is VITON13’s own product, not client work. There is no payment layer: payment for an order is agreed by hand, and VITO bonuses cannot be spent online. Encryption covers order attachments and briefs only, and whoever holds the full link, the studio included, can decrypt them; the cabinet as a whole is not end-to-end encrypted.

A phone number is linked after sign-in and is not a way to sign in; there is no Google, Apple or social login. Everything behind sign-in was checked in the code and its tests, not in a live session, and this case quotes no member, order or revenue figures.

Planning something similar? I read every message myself.

All work

Next project

VIT LIVE assistantWebsite chat Internal2026 All work (19)