Keyless auth done right: ed25519 keypairs replace signup, passwords and email links
banteg · x · 2026-10-13
- banteg describes his game site's auth with no signup, passwords, email links or passkeys — "the least annoying auth I've ever used":
- On first launch the game makes an ed25519 keypair; the key is you, an account is a set of keys. Ranked runs are signed over the replay hash and name; offline runs queue in an outbox; replays carry no identity but remain verifiable.
- "Profile" signs a one-time challenge to log into the site. Optional GitHub/Discord/X linking doubles as recovery: a new key can be merged back with the old account to restore runs, names and badges.
More from coding & agent
- huashu-art-motion skill lets Claude Opus paint animations in 35 art styles with code — anselm · 2026-10-13
- AI writes code 100x faster, but watch out for slopsquatting supply-chain attacks — Thionne_WTZ · 2026-10-13
- Building a verification MCP: why pass/fail scores aren't enough for agent debugging — Practical_Green5775 · 2026-10-13
- Fine-tuning speech models for Algerian Darija: a team's four open questions — Fair_Bed_914 · 2026-10-13
- Devtool companies that had mindshare just years ago have lost all relevance to AI — andreisavu · 2026-10-13
- Enterprise AI adoption notes: why non-technical teams stall at the blank prompt box — brandon_galang · 2026-10-13