Add wallet-grade authentication to your dApp in 10 lines. Your users own their identity. You own your runway.
ShardKeep Auth · Developer Pitch · v1
There's a better primitive now: the user already has a wallet. Use it.
Phantom, Backpack, Solflare, Ledger. Sign a nonce, you get a verified identity. No password, no email round-trip.
User profile + preferences live in their on-chain ShardKeep vault — portable across every dApp that integrates.
Lost wallet? Social recovery via N-of-M guardian approval. Backup wallet 2FA. Emergency lockdown. None of it your problem.
import { ShardKeepAuth } from '@shardkeep/auth';
const auth = new ShardKeepAuth({ apiKey: 'sk_live_…' });
// On your "Sign in" button:
const { token, wallet, profile } = await auth.signIn();
// Verify on your server:
const session = await auth.verify(token);
if (session.valid) {
res.cookie('sid', session.id, { httpOnly: true });
}No JWT secret rotation. No email deliverability hell. No password DB. The wallet signature is the proof.
| Plan | Price | Auths/mo included | Overage | For |
|---|---|---|---|---|
| Hacker | Free | 5,000 | — | Side projects, prototypes |
| Indie | $29/mo | 50,000 | $0.005 | Solo & small teams |
| Studio | $99/mo | 500,000 | $0.003 | Funded startups |
| Enterprise | Custom | Unlimited | SLA + SAML | Compliance + scale |
Compare: Auth0 Essentials = $35/mo for 1,000 MAU. ShardKeep Indie = $29/mo for 50,000 auths.
API keys · OAuth refresh tokens · seed phrases · MFA recovery codes · per-user secrets your app shouldn't see plaintext of. Each entry Shamir-split, distributed, recoverable.
HSM integration · KMS rotation policy · per-tenant key isolation · zero-knowledge architecture · GDPR right-to-be-forgotten endpoints. All of that is the protocol's problem.
await vault.store(userId, 'stripe_refresh_token', secret);
const token = await vault.retrieve(userId, 'stripe_refresh_token');
// You never see the encryption key. The user's wallet does.If you have a distribution channel, we have a product to fill it.
You don't store user PII — the wallet does, encrypted. Right-to-be-forgotten = user revokes wallet permission. Your DPIA shrinks 80%.
On-chain audit trail of every access, every rotation, every challenge. Auditors love immutable logs they don't have to trust.
~85% of the protocol survives without ShardKeep. Your users keep access. You can fork the client. Your business doesn't die with our seed round.
Users keep their data. They migrate to any other ShardKeep-integrated app and bring their identity with them. No customer data trapped behind your dead AWS bill.
Wallet sign-in · vault store/retrieve · subscription tiers · staking · cNFT shard maps. 15 nodes, 97K+ challenges processed.
MainNet launch · public Auth API · TypeScript & Python SDKs · OAuth 2.0 / OpenID Connect compatibility shim.
White-label dashboard · SAML/SCIM for enterprise · mobile SDK (React Native, Swift, Kotlin) · DAO governance over fee schedule.
Early-access partner program now open. SDK access · co-marketing · revenue share for early integrators.
developer@crossovr.io
master.shardkeep.io · github.com/shardkeep (soon)