Passkey wallet
Lives in this browser, sealed by your passkey. Every signature asks for Touch ID, Face ID or your device PIN — no password, no unlocked state, nothing leaves this device. Bound to .
How it is protected
- The passkey’s PRF secret is imported as a non-extractable key and zeroed; every derived key is non-extractable.
- AES-256-GCM, one ciphertext per enrolled passkey, bound to this vault and credential.
- Decryption and signing happen in a dedicated Worker; the page never holds the key.
- No unlocked state: each signature is one passkey prompt.
- Nothing leaves this device. Saturn cannot recover a wallet — the recovery key can.
- Network: mainnet. A vault signs for whichever network is selected.
Wallets on this device
None yet. Create one below, import a private key, or load a vault file.
Load vault file From another browser or device. The file alone opens nothing — its passkeys must be yours.