Identity

Generate or Import

Your Ed25519 keypair is generated locally in your browser. The private key never leaves your machine. Your public key becomes your identity.

Challenge-Response

When you need to authenticate, the server sends a random 32-byte challenge. Your browser signs it with your private key. No passwords cross the wire.

Session Nonce

After verification, you receive a session nonce valid for 15 minutes. It is sent as X-Graf-Session header on subsequent API calls.

Your real ID – no username, no password

A SoulKeyID is derived from your Ed25519 public key: BLAKE3(pubkey)[0:8] encoded as hex. It's deterministic, unforgeable, and computed locally. Nobody issues it to you – you generate it yourself.

This replaces usernames, passwords, OAuth tokens, and every other identity mechanism. One keypair. One identity. Mathematically bound to you and only you.

One key, every Libertaria app

The fingerprint is universal – the same across every application. Only the context prefix tells the system which app is talking:

Generate your key once. Use it everywhere. No SSO, no federated login, no corporate identity provider standing between you and your own sovereignty.