Skip to content

About rootcard Developers Key tool Look up Sign in Create a card

Sign in

Welcome back.

Your password unlocks your vault here in the browser, which then signs rootcard.org's one-time challenge. The password itself is never sent.

Sign in with your handle

Handle Your username, a # and the 4-character tag from your ID card.

Password

Which password This identity has several passwords. Pick the one you typed.

Get a card instead

Forgot your password?

Nobody can reset it for you, rootcard.org included: there is no e-mail reset to hijack. Reset it yourself with your recovery card in the key tool. Your id, your handle and your data stay.

Home somewhere else?

You sign in only at your identity's home. If your home is another server, sign in there; if you want rootcard.org as your home, move with the key tool.

Your identity

Your ID card

Unlocked in this browser only. Closing the tab signs you out.

Overview

View public card

Public profile

Your public profile is shared with every host and service that looks you up. Once copied it cannot be taken back.

Display name user.name

About user.about

Website user.url

Private data

Encrypted inside your vault. rootcard.org stores it but cannot read it.

Private note user.note

Change password

The new password replaces the one you signed in with. The change is signed with the old password, so rootcard.org can check it without ever seeing either.

New password At least 12 characters, not your username.

New password again

A password change stops the old password at once. After a suspected leak, reset with the recovery card in the key tool instead: that also ends every copy of the old vault.

Prove who you are

A service that wants to know "is this really you, now?" gives you a challenge and names itself as the recipient. The proof is valid only for that recipient and only while this instance is current.

Recipient

Challenge A JSON statement is hashed into the challenge; say what it is for and until when.

Recovery and moving

These change who can access your identity or where it lives, so they need the recovery card. The recovery card is never typed into this site: use the key tool, a page you open from your own disk.

Reset a forgotten password
Add or revoke passwords
Move to another home, or restore after losing this one
Rotate the recovery key, or retire the identity

Get the key tool

A public home for rootcard identities. rootcard is an open standard: anyone can run a home, and every identity can move between them.

rootcard.org

Create a card Sign in Look up an ID card Key tool This home's API Operator and policy Source of this site

The rootcard standard

About rootcard Specification Host protocol Threat model GitHub: rootcard

Developers

Integrate crates.io/rootcard crates.io/rootcard-host npm/rootcard

rootcard 0.3.1 · pre-1.0, not yet externally reviewed. Do not rely on it for high-value accounts yet. This home never sees your password and cannot reset it.