Ikavery
  1. 01Device
  2. 02
  3. 03
  4. 04
  5. 05
01 / Initial user

Pick your identity
for this vault.

The initial user is whoever runs setup. It can be a passkey (Touch ID, Face ID, hardware key) or any Sui wallet that can sign personal messages. The encryption key you derive here decrypts shares produced for you. Gas is paid separately by the wallet you connect from the navbar.

Passkey
  1. iBrowser creates a new WebAuthn credential bound to this site.
  2. iiWe extract a 32-byte PRF seed. The authenticator never reveals the secret; the browser stays sandboxed.
  3. iiiThe seed deterministically derives an Ika encryption identity. Only this passkey can recreate it.
Wallet
  1. iConnect any Sui wallet that supports signPersonalMessage.
  2. iiThe wallet signs a fixed app-scoped message. We hash that signature into a 32-byte deterministic seed.
  3. iiiThe seed derives an Ika encryption identity. The same wallet always derives the same identity — so you can re-derive on any device.
Pick the path that fits — passkeys are great for personal vaults; a wallet works if you already have one you trust for signing.