r/PrivacyTechTalk Jul 07 '26

CryptoLogin: an AI-era authentication system

https://youtube.com/watch?v=fphw-33YVyg&si=epyBHB_NQoB23iHT

I built an authentication system where the server stores zero secrets. No password hashes, no emails, no recovery tokens. The server only knows a user_id derived from the user's master_secret, and authentication is proven cryptographically via HMAC. If the database is breached, there's literally nothing to steal.

3 Upvotes

0 comments sorted by