Sign in

Your passphrase proves who you are without ever being stored: the server keeps only an OPAQUE envelope, so a breach reveals nothing an attacker can crack offline.

FORM FALLBACK: this form sends your passphrase to the server over TLS, where the protocol runs for you. The device sign-in keeps it on your device.

No account yet? Create one. Forgot your passphrase? Your 24-word recovery phrase is the way back — it is the only one, by design.