Sign in to websites by QR

You see where you are signing in. The site never sees your password.

The site shows a QR code

On the sign-in screen of a service that supports Secret Keeper. On a phone the link opens the app by itself.
Scan it with the app

Secret Keeper shows which service asks to sign in and from where: browser, location, address.
Confirm

PIN or biometrics, and the service gets its confirmation. You type neither a login nor a password.

9:41●●● ▲ ▮

Conversations

B Bob encrypted, send it to the recipient 14:02

C Clara Got it, thanks! 13:40

D Design team Sent the contract as .skf 11:15

D Dad Call me when you can 09:30

E Eve See you at seven 08:12

🤫 Profile Vault Conversations Settings

Good to know

Sign-in codes are one-time and live for a few minutes: an expired QR code has to be refreshed on the site.
The service learns only your Secret Keeper address - the public key. The private key never leaves the device.
For developers: the protocol is open, see “Protocol spec”, § 4.5.

A site asks for a card or a delivery address, you pick a Vault record and send it encrypted. Nothing is retyped.

Messages and files are encrypted on your device and travel through any messenger. Only the recipient can read them.