TokenPass Identity Wallet
Personal OAuth System
No cloud accounts, no gatekeepers, same familiar experience.
Privacy-First Identity
Your keys never leave your device. Every operation happens locally using Bitcoin cryptography.
Replace Google, GitHub, and other identity providers. Authenticate to any app with your Bitcoin identity.
Each website gets a unique derived key. Apps can't track you across sites or correlate your identities.
ECIES encryption with Type42 key derivation. Only you can decrypt messages meant for you.
Built on Bitcoin Attestation Protocol. Your identity is cryptographically provable and portable.
Desktop apps, web apps, mobile apps. Any app that supports OAuth can use TokenPass.
Local signing means no network latency. Signatures are instant, not dependent on cloud services.
How It Works
TokenPass uses Type42 key derivation from the BRC-42/43 standards to create isolated keys for each application.
Create Your Identity
Generate a master seed protected by your password. This creates your Bitcoin-backed identity that only you control.
Connect to Apps
When an app requests authentication, TokenPass derives a unique key for that app. No two apps see the same identity.
Sign & Authenticate
Approve signing requests with one click. The app receives a cryptographic proof of your identity without seeing your private keys.
Encrypt & Decrypt
Send encrypted messages to friends using their public keys. Only they can decrypt with their private keys.
Developer-First API
TokenPass exposes a simple REST API on localhost. Request tokens, sign messages, and encrypt data with standard HTTP calls.
Install & Run
Start the TokenPass server with a single command
bunx @sigma-auth/tokenpass-serverCreate Wallet
Register your identity with a secure password
POST /api/registerStart Authenticating
Sign messages and prove your identity instantly
POST /api/sign// Request an access token
const { token } = await fetch('http://localhost:21000/api/auth', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
password: 'your-password',
expiry: '1h',
scopes: ['sign', 'encrypt']
})
}).then(r => r.json());
// Sign a message for authentication
const { signature, address } = await fetch('http://localhost:21000/api/sign', {
method: 'POST',
headers: {
'Authorization': `Bearer ${token}`,
'Content-Type': 'application/json'
},
body: JSON.stringify({
message: 'Authenticate to myapp.com',
host: 'myapp.com'
})
}).then(r => r.json());
Sigma Auth Ecosystem
TokenPass is part of a broader ecosystem of Bitcoin identity and authentication tools.
Better Auth plugin with React hooks for TokenPass integration. Add Bitcoin authentication to any app.
Bitcoin Attestation Protocol library. Create and manage cryptographic identities on Bitcoin.
HTTP authentication using Bitcoin signatures. Create and verify auth tokens with BRC-77 (BSM).