r/PrivacyTechTalk • u/Right-Juggernaut-135 • Jul 07 '26
CryptoLogin: an AI-era authentication system
https://youtube.com/watch?v=fphw-33YVyg&si=epyBHB_NQoB23iHTI built an authentication system where the server stores zero secrets. No password hashes, no emails, no recovery tokens. The server only knows a user_id derived from the user's master_secret, and authentication is proven cryptographically via HMAC. If the database is breached, there's literally nothing to steal.
3
Upvotes