Skip to content

Trust

Check how Renown works, not just what we say

Each claim below links to the public code that implements it.

How it works

  1. Your identity is your wallet address

    Your Renown DID is did:pkh:eip155:<chain>:<address>, derived from the wallet you sign in with. There is no password: your wallet signs you in.

    use-auth-flow.ts (source code)

  2. Each app gets its own key, on your device

    When you use an app, it generates a P-256 key pair with your browser’s Web Crypto API and keeps it in IndexedDB. That key, not your wallet, signs the app’s requests and document operations.

    renown-crypto.ts (source code)

  3. Apps act for you only with a credential you signed

    Approving an app means signing one EIP-712 verifiable credential with your wallet that names the app’s key. It is valid for 7 days by default; an app may ask for anything from 1 to 365 days, and a non-default validity is always shown to you to confirm.

    credential-validity.ts (source code)

  4. You can revoke any credential, and only you can

    Revoking requires proof that you are the wallet that issued the credential. The SDK’s SwitchboardClient.getCredential skips revoked credentials and ignores expired ones, so the app’s key stops being accepted on your behalf.

    renown-auth/resolvers.ts (source code)switchboard.ts (source code)

  5. Your work is signed

    Each document operation an app submits for you carries a signature over the action, the target document and the signer’s identity, so anyone can check who made a change.

    signer.ts (source code)

Want to see or revoke what you have approved? Open Your Renown.

What Renown stores, and what it never holds

Stored

  • Your public profile: display name, handle, bio, links, avatar and the wallet address it belongs to.
  • The credentials you sign, which are public so that anyone can verify them, including whether they were revoked.
  • Images you upload, kept in object storage and served through short-lived signed links.
renown-user/migrations.ts (source code)services/media.ts (source code)

Never held

  • Your wallet’s private key or seed phrase. Every wallet signature happens in your wallet.
  • The private keys apps generate on your device.
  • A password: there is none.

Public code

The Renown package and SDK are AGPL-3.0 licensed, and this website's code is public. Read it, run it, audit it.