# KeiAuth — sign-in without passwords or vendor hardware keys

Canonical page: https://keilab.io/security/keiauth/

security · keiauth

An authentication scheme the lab derived itself for its own internal tools, built to remove the dependency on a third-party hardware trust anchor such as a YubiKey or an Apple Secure Enclave. The mechanism is proprietary and shared under NDA.

## What it does

KeiAuth is designed to prove who is signing in without a stored password and without a vendor hardware key. How the identity is formed and verified is proprietary and available to partners under mutual NDA.

## Why not WebAuthn

Hardware-vendor PKI (YubiKey, platform Secure Enclaves) is solid, but it is a third-party trust anchor and a supply-chain dependency. KeiAuth is the lab's own primitive, built for the lab's internal tools without that dependency. The trade-off is stated plainly: the key is held in software, so KeiAuth does not give a hardware key's physical isolation.

## In our tests

In our tests the core Rust crate passes 57 of 57 tests.

cross-references

- [→ kgl-overlay (sibling)](https://keilab.io/research/kgl/)
- [→ max-chain (sibling)](https://keilab.io/ai/max-chain/)
- [⊘ Security overview](https://keilab.io/security/)

Status: In development

Mechanism: Proprietary · details under NDA

Replaces: WebAuthn / hardware-vendor PKI

Sensitivity: concept public · methods NDA

[⊸ Security inquiry](https://keilab.io/contact/)

---
KeiLab is operated by KeiSei LLC, a Wyoming limited liability company. +1 307 210 8538
Site index for AI agents: https://keilab.io/llms.txt