Documentation
Signing in on another device
Your key moves between your own devices without ever being readable on the network.
The new device generates a one-time keypair of its own and shows a code. Your existing device encrypts your recovery phrase so that only that one-time key can open it, and hands the result to a relay. The new device decrypts it, re-derives your identity locally, and checks the result against the genesis record already on the chain.
The relay only ever holds ciphertext. It could be read in full and still reveal nothing.
Check the fingerprint
Both devices show the same short fingerprint before you approve. Comparing them is what makes an interceptor useless — without that step, someone in the middle could substitute their own one-time key and receive your phrase instead. It takes a second and it is the whole security of the exchange.
Only on devices you trust
Pairing puts your signing key on that machine. Anyone who controls it can sign as you. Do not pair a shared, public or unmaintained device. A current Chrome, Edge or Safari is recommended — older browsers lack the hardware key protection this relies on.
If a device is lost, revoke it from your account page. Anything signed while it was trusted stays valid, which is correct: that work genuinely was yours at the time.