banteg · 2026-10-12 22:34 UTC

has no signup screen, no passwords and no email links, no passkeys, and i think it’s the least annoying auth i’ve ever used. on first launch the game makes an ed25519 keypair. that key is you, and an account is just a set of keys. every ranked run gets signed over the replay hash and your name. offline runs wait in an outbox and upload later. replays carry no identity, so anyone can still verify any run. hit “profile” and the game signs a one-time challenge and opens with you already logged in. linking github, discord or x is optional, and it doubles as recovery. if your disk dies or you clear the browser data, the game makes a new key, which starts an empty account. sign in with the login you linked, and the site offers to link it up with your old account. confirm, and your runs, names and badges are back. a second pc joins the same way. the server checks signatures with webcrypto and needs no crypto library. the original game posted scores as the http user “guest”. i kept the spirit.

Loading the story on Tree News…