I made a pivot toward something better and now need some real world testing. I’ve built out passkey login for Zap Cooking.

In this flow, the passkey is not your identity and it is not a copy of your nsec. It is just the lock. Your key is encrypted, and the passkey is used to unlock/sign through Zap Cooking.

This is on a staged site, but it uses live Apple/Google passkey functionality, so please use a throwaway nsec only. Do not use your main key. Delete the passkey after testing.

Looking for feedback on UX, warnings, trust, and anything that feels confusing or sketchy.

Reply or DM if you’re willing to help. 🍳 sats will flow to the helpers ⚡️