passless.org

Imagine nobody on Earth can reach you
without your consent.

Imagine your name is yours,
forever, if you want.

Imagine your device drowns in the ocean
and you lose nothing.

Imagine the login screen behind museum glass,
next to the fax machine and the phone book.

Now stop imagining
View source

1 human = 1 identity.

Everything you carry today is a copy.
A social security number. A card number. An address. A password.
Whoever holds the copy is you, from anywhere, for as long as nobody notices.
You have been a bearer token your whole life.

A passless identity has no copy to steal.
Your handle is a name. Hand it out like a phone number; knowing it gets a stranger nothing.
It proves you only on a device of yours, and a device you can see, hold and cut off.
Lose the device, keep the identity. It was never on it.
Forget the handle, and the people you chose restore you. Nobody else can.
Change the handle, and nobody notices: what people hold is a key exchanged when you met, not the name.
Nothing exists anywhere that can be breached in bulk.
The full walk, in plain words →

Handles: no limit. Lives to live them with: 1.
That is what makes 1 = 1.

This is passless.
Not passwordless with a file where the password was.
No pass at all.

Which freedom

The dictionary gives two.
Sense 2: a privilege granted by one in authority: the freedom to enter without showing his pass.
Sense 1 c: liberation from the undue, arbitrary, or despotic power and control of another.
Every name you hold today was issued, so it is sense 2, and you have never held the other kind.
passless is 1 c. Nobody issued it, so nobody can take it.

Anyone can issue it. Nobody can own it.

Three rules make it yours, and they are part of the protocol, not a promise from us.

Your custodians are people you pick, and they are changeable.

A verifier cannot tell whose hardware answered.
Nobody's chip is the premium human.

The secret is made on your device, by you.
No factory knows it, so no factory can revoke it or be made to hand it over.

An implementation that breaks any of these is not passless,
whatever the keynote says.

What one identity buys

Everything above is defense. Here is the other column.

My wife posts a photo. I want to know she is okay.
If one identity signs her captures, my phone can tell me it is really her, that it is really now,
and, because she checked one box for me once, where she is, sealed to me and nobody else.
The platform carrying the photo learns nothing.
Proof of life, a byline and a private channel, from one identity and no new infrastructure.
The camera story, in full →

ADMIT ONE HUMAN

Doors

• For humans → What this means for you. Plain words, no jargon.
• For developers → The protocol, the code, the design doctrine.
• For reviewers → The threat model, and how to report what you break.

Status

Working today

Enrollment and secured messaging between real devices, live since July 2026.
Photon, a messenger, and RustDesk, a remote desktop where your machines just show up:
one identity, shared by both, owned by neither. Free, open source, on a real network now.

Identities on the network

Fourteen that I know of. There is no registry to count from, so I can only count my friends.
That is the correct number of registries: 0.

Ends: one

A world where proving you are you
costs nothing and belongs to 1.