Passkey-first onboarding
IDSafe keeps your vault locked behind passkeys and client-side encryption.
Create your account with a passkey, set a recovery passphrase, and let IDSafe set up your encrypted vault automatically.
🔐
WebAuthn-first access
Register and sign in using platform authenticators for passwordless, biometric-first security.
🛡️
Client-side encryption
Vault entries are encrypted in the browser using AES-256-GCM before they ever reach the server.
🧩
Recovery-ready
Set a recovery passphrase to derive a KEK and re-wrap the vault key when devices change.