Interactive Demo V1

Legacy Challenge-Response

Create an account in 2 seconds. One secret. No personal data.

Note: V1 uses encrypted challenges. V2 uses HMAC-based zero-knowledge authentication (recommended).

Try Demo V2 → ← Back to Home

# V1 Flow (Legacy)
1. Client derives user_id from master_secret
2. Server generates encrypted challenge
3. Client decrypts challenge locally
4. Client sends decrypted challenge back
5. Server verifies the match

# V2 Flow (Recommended)
1. Client derives user_id from master_secret
2. Server generates plaintext challenge
3. Client computes HMAC(challenge, user_id)
4. Server verifies HMAC (zero-knowledge)

🧪 Demo V1

Interactive Demo

Create an account in 2 seconds. One secret. No personal data.

🚀 Ready to start

Your Master Secret

0/32

This secret never leaves your device. Stored securely.

📋 Result

💡 How it works?

Your secret is used to encrypt your data locally. The server only receives a challenge that only you can decrypt. This is the magic of Passwordless Authentication without Password Storage.