One account, for everything we build.
And it is built so that it cannot read what it holds.
It never sees your keys
Key material arrives already sealed. There is no code path that opens it, because there is no key to try.
No SMS. Ever.
Authenticator apps and security keys. SIM swapping makes SMS the weakest factor still in wide use.
Sessions end in minutes
Access tokens last fifteen minutes, so revoking a device takes minutes rather than the rest of the day.
Deletion is deletion
Thirty days to change your mind, then your keys, devices and memberships are erased — not flagged.