⧗timestoresignup two-door authweb: HBC-ZK

sign up / private

Private account

The verification token is consumed from the URL fragment and is not sent in the verification-request response.

Loading the private-account client…

Verify handle

Password

The password is processed by OPAQUE in this browser; only protocol messages leave the page. Password-derived private keys and the recovery private recipient remain memory-only and are never written to browser storage. The recovery key is mandatory and shown once.