Pick your identity
for this vault.
The initial user is whoever runs setup. It can be a passkey (Touch ID, Face ID, hardware key) or any Solana wallet that can sign transactions. The credential you choose here authorises the on-chain Recovery account create and stays as member 0 of the roster.
Passkey
- iBrowser creates a new WebAuthn credential bound to this site.
- iiThe credential is constrained to ES256 (secp256r1) so the assertion is verifiable by Solana's native precompile.
- iiiEvery recovery op runs a fresh WebAuthn assertion; the program checks the signature on chain via SCHEME_WEBAUTHN.
Wallet
- iConnect any Solana-compatible wallet — Phantom, Backpack, Solflare, hardware, or an embedded social login.
- iiThe connected pubkey is recorded as member 0 in the on-chain Recovery roster.
- iiiThe same wallet signs the on-chain create & transfer-authority transactions on the Review step, and pays Solana fees.