⧗timestoresignup two-door authweb: HBC-ZK

sign up / private sign in

Private sign in

Loading the private-account client…

Unlock

The password is processed by OPAQUE in this browser; only protocol messages leave the page. The derived private recipient is memory-only and is cleared on lock, page close, or idle timeout.

About recovery keys

If the browser session is still valid but the in-memory scope key has auto-locked, this same OPAQUE login re-derives the export key and unlocks the scope again.
Current handoff boundary: this page proves and holds the memory-only unlock, but a full server-rendered page navigation intentionally clears it. The same-page/SPA Drive consumer is not wired in this slice, so this page does not claim a complete browser Drive UI yet.