passless.org

Imagine nobody on Earth can reach you
without your consent.

Imagine your name is yours,
forever.

Imagine your device drowns in the ocean
and you lose nothing.

Imagine knowing she is okay
from nothing but the photo she posted.

Imagine the login screen behind museum glass,
next to the fax machine and the phone book.

Now stop imagining
View source

1 human = 1 identity.

A password proves only that its sender knows it,
and checking it means sending it,
so the secret travels every time it is used,
no matter how carefully it is received.
A passkey fixes the sending. Real progress. But the key is a file,
and a file either copies, or is lost with its one device,
or waits behind a vendor's recovery door,
and whoever can convince the vendor is you.
The full walk, in plain words →

A TOKEN lives in hardware you own.
It proves you are you without telling anyone a secret.
The secret never leaves the chip,
and nothing exists anywhere that can be breached in bulk.
Recovery is thru people you choose, never thru a company.
No company sits in the middle, so no one can lock you out.

A second identity is not a second password.
Anyone can mint one; there is no rule against ten.
But a life adds up in one place:
the people, the paycheck, the history all land on the one that is really you.
Handles: no limit. Lives to live them with: 1.
That is what makes 1 = 1.

This is passless.
Not passwordless with a file where the password was.
No pass at all.

Anyone can issue it. Nobody can own it.

Three rules make it yours, and they are part of the protocol, not a promise from us.

Your custodians are people you pick, and they are changeable.

A verifier cannot tell whose hardware answered.
Nobody's chip is the premium human.

The secret is made on your device, by you.
No factory knows it, so no factory can revoke it or be made to hand it over.

An implementation that breaks any of these is not passless,
whatever the keynote says.

What one identity buys

Everything above is defense. Here is the other column.

My wife posts a photo. I want to know she is okay.
If one identity signs her captures, my phone can tell me three things no platform can.
It is really her, because the signature checks against the key I pinned when we met,
not against a vendor list.
It is really now, because the file folded in public randomness that did not exist an hour ago,
and a reposted old photo cannot fake that.
And because she checked one box for me once, I can read what she sealed for me and nobody else:
where she is, taken when, encrypted to my key at the moment of capture.
The platform carrying the photo learns nothing.

That is proof of life, a byline, and a private channel,
from one identity and no new infrastructure.
The camera story, in full →

ADMIT ONE HUMAN

Doors

• For humans → What this means for you. Plain words, no jargon.
• For developers → The protocol, the code, the design doctrine.
• For reviewers → The threat model, and how to report what you break.

Status

Working today

Device enrollment and secured messaging between real devices,
live since July 2026.
Photon is the first passless application, a messenger;
RustDesk is the second, a remote desktop
where your machines just show up and one click is the whole login.
One identity, shared by both, owned by neither — which is the point:
an identity you prove once is not an account either of them holds.
Both are free, open source, and running on a real network now.

Identities on the network

Fourteen that I know of.
The network cannot count its users, because there is no registry to count from,
so I can only count my friends.
That is not a small number. It is the correct number of registries: 0.

Ends: one

A world where proving you are you
costs nothing and belongs to 1.