For end users

Passkeys, devices and team members

Txpass accounts start with a passkey. You do not need a wallet to sign in, approve agents or manage your account. A Yours or other BRC-100 wallet remains an optional signer if you already use one.

Publishers never see your passkey. They verify short-lived sessions Txpass issues for your identity.

Passkeys (default sign-in)

  1. Open /account.
  2. Create or unlock your Txpass ID with a passkey (Face ID, Touch ID, Windows Hello or a security key).
  3. Your browser holds a secp256k1 identity key, wrapped so only that passkey can unlock it. Txpass never sees the plaintext key.

That identity key signs the same account actions a wallet used to: agent policies, connect approvals, receipt salts and so on. The passkey only unlocks the key; it does not sign receipts or API requests itself.

Optional wallet. On the same sign-in flow you can still connect Yours (5.x or later) or a BRC-100 desktop wallet. Wallet and passkey identities can be linked; the protocol and what publishers verify stay the same.

Adding devices (Pro)

Your first device is always free: that is where the root identity lives.

Extra devices need Txpass Pro on your own Txpass account (not a publisher product plan):

  • Each secondary device gets its own identity key, locked by a passkey on that device.
  • An existing device approves it with a signed admin delegation (similar to connecting an agent, but with account-admin scope — not publisher API access).
  • The root identity key stays on the first device; it is not copied to the new one.
  • Devices appear on /account, where you can label and revoke them separately. Revoking a device stops its admin access; agents under other devices keep working.

During early access, Pro is a free one-click month on the account page (renew the same way; card billing comes later).

Team members (Pro)

Also gated by Txpass Pro: invite people to help administer your account (approve agents, manage devices within what you allow). Each team member signs in as their own Txpass ID. Manage and revoke invites on /account.

Manage and revoke

Everything lives on the account page:

  • Sign in, see plans and receipts
  • Agent policies and connected agents
  • Devices and team members (when Pro is active)
  • Revoke a device, remove an agent or revoke a policy at any time

Recovery note

If you restore a passkey backup onto a new browser, that browser becomes the live root holder and the previous root browser stops acting as root. Prefer Add device (Pro) when you want a second device alongside the first. Details and walk-throughs stay on the account page.