Unverified50% confidenceFactExact time
Secret Key adopts a self-hosted model, with fragments and the verification process entirely controlled by the user and not relying on third-party servers.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/31/2026
First Seen
Valid until: 1/29/2027
Sources
Related Entities
Related Claims
UnverifiedPasskeys' private keys are stored in the user device's trusted execution environment (TEE) or hardware security module (HSM), and the server only stores the public key.76% similarUnverifiedThe pre-installation model allows devices to be locked with GrapheneOS keys directly at the factory, so the device a user receives is protected by a complete chain of trust.74% similarUnverifiedVendor keys are encrypted at rest using a Fernet master key; the master key is generated at first startup, persisted to a Docker volume, and never leaves the container.72% similarUnverifiedIn a non-custodial solution, private keys are always held by the user, the platform cannot access funds, and even if the platform is hacked or shut down, attackers cannot directly transfer user assets.72% similarUnverifiedSSH密钥认证过程中私钥永远不离开本地设备，即便服务器被入侵，攻击者获得的公钥也无法反推私钥71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1120463API
curl https://kongchang.com/api/v1/knowledge/claims/1120463MCP
get_claim(id=1120463)