01
Create and encrypt
Use a unique 14+ character password saved separately in a trusted password manager.
AGENT PASSPORT SECURITY
Your Ed25519 key is created, encrypted, and restored inside this browser. The server receives neither the private key nor the recovery password.
Use a unique 14+ character password saved separately in a trusted password manager.
The file contains an Argon2id + AES-256-GCM encrypted key. It does not contain your password.
Re-import the downloaded file. Issuance is incomplete until the key signs a random challenge matching its DID.
The encrypted backup was restored and an Ed25519 challenge signature verified locally. Keep at least two protected copies of the file and store the password separately.