01
Create and encrypt
Use a unique 14+ character password saved separately in a trusted password manager.
AGENT PASSPORT SECURITY
Create the key.
Prove the backup works.
Your Ed25519 key is created, encrypted, and restored inside this browser. The server receives neither the private key nor the recovery password.
Ready. Nothing has been generated or uploaded.
EXISTING DID
Bring a key from elsewhere
The safer default is an encrypted Agent Passport recovery file. Use this one-time import only when another tool gave you a raw 32-byte Ed25519 seed.
I only have a raw private key
A raw seed controls the DID.
Check that the address bar says flop-agent-passport.pages.dev. The seed is matched to the DID, encrypted in this tab, cleared from the form, and never sent or stored by this site.
02
Download backup
The file contains an Argon2id + AES-256-GCM encrypted key. It does not contain your password.
03
Restore and verify
Re-import the downloaded file. Issuance is incomplete until the key signs a random challenge matching its DID.
✓
PASSPORT IDENTITY ISSUED
The encrypted backup was restored and an Ed25519 challenge signature verified locally. Keep at least two protected copies of the file and store the password separately.
What this does not do
- No central password reset or key recovery.
- No server upload, analytics SDK, wallet connection, or token claim.
- No FLOP endorsement, reward eligibility, personhood, or uniqueness proof.