dolu on nostr

Open in Damus

@dolu 1750594597

Just built Passkey39: a library that generates the same crypto private key every time you use your Face ID or Touch ID. No more seed phrases to lose, your biometric authentication becomes your deterministic wallet key through WebAuthn magic.

What do you think? I'm curious if it's a good or bad idea 🤔

👉 https://github.com/dolu89/passkey39
🎯 Live demo: https://passkey39.dolu.dev

(Not published to npm until it's safe to use)

296❤️5🤙4👀2❤️1🤔1

Neo ⚡️ · 39w

Sounds risk to me. I just could scan your face in public to rug you?

SPA (Super Phat Arrow) · 39w

This looks amazing! I couldn't get the demo to work on Android Brave. It made the credential, but couldn't auth. BTW couldn't resolve your ln address to zap you either. https://image.nostr.build/cee9c9b3cfcc103d5fc6266161a363f9d7fd02d1214c5aaaa7a4a7236afa5e24.jpg

Bitpower · 39w

That’s so cool. Beter use an additional passphrase on the face-enabled seed phrase in case of an $5 wrench attack.

What if my device with passkey gets destroyed what is the recovery method without a seed phrase?

very cool, i was building something similar but now i can just use this, how do you handle recovery if the domain name you are using for the passkey goes away? can i just spoof it locally? i’m not sure how that works

Neo ⚡️ · 39w

Let's say this method is super safe. Then in theory I could create a private key with it. Backup up it in metal (to be safe) and then have wallet on my phone that never has to store a key at all and instead could sign just in time my transactiona with my biometrics? The perfect "hot" wallet?

Big Barry Bitcoin · 39w

FYI, not working on GrapheneOS. I even allowed the JavaScript JIT permissions. https://image.nostr.build/4ff9c4d21936e91d55b473bb8208a3808df7a999fd8ac0bb524a0033aea2fae5.jpg

Taoist Bitcoiner · 39w

Biometrics can be hacked and can never be changed. These are NOT secure sign on solutions. You can be unconscious or a corpse and your device can still be hacked. Like your Social Security Number, if/when your biometric data gets leaked to the dark web there's nothing can do about it. It's FAR more...

おくなも（早く寝ろ） · 39w

This is great. I think this is better for peaple. I am building an application that uniquely creates a "Nostr" private key (or wraps an existing key) with a passkey. demo https://nosskey.app https://github.com/ocknamo/nosskey-sdk