How do you verify the ID? In the software? What if the software is hacked? I'm curious how this can be safe.