—
—
—Four words give distinct dwell and flight intervals. Minimum 10 characters. Do not use a real password. Everything runs in this tab; no network request is made.
Teach. You type the same phrase eight times and the trial keeps what is consistent about how you do it.
Hand the keyboard over. They can see the phrase — that is the point — and they get three attempts.
Take it back and type it once. Then both attempts are scored against the same profile.
Press Enter to submit, Escape to clear the box and start the sample again. Backspaces are legitimate keystrokes and become part of your secret if you repeat them every time — in the product an Escape tap counts the same way, but here it is the reset.
Phantom Keys this sample · 0
Means and standard deviations per feature, σ floored at 8 ms. The raw keystroke events that built it were destroyed. What remains cannot be replayed as typing.
They type exactly what they see. Three attempts. Their trace is drawn against your envelope; bars leaving it turn red. Escape clears the box.
Attempt 1 / 3
Your natural rhythm against the profile you taught it. Nothing else is asked for.
One attempt
Re-evaluates the recorded attempts. Nothing is retyped.
—
——
—The server would hold ciphertext and an Argon2id hash. It could not read this phrase, and neither could we.
You were told a band and a sentence. The number behind it is the one thing an attacker could tune against.
Amber asks for a retype, then a Backup Code. A broken wrist is an inconvenience, not a lockout.
Capture refuses to run without a visible light. That is enforced in code, not in policy.