Privacy-First Authentication
Experience secure, seamless access to all trading tools with our innovative authentication system
What is PrivaC?
PrivaC is our client-side encryption system that keeps your private keys encrypted at rest in the browser. Decryption happens on-demand and is gated by WebAuthn passkeys (Touch ID / Face ID), so even XSS attacks cannot silently access your keys.
Your encryption key is derived deterministically from your credentials — a wallet signature for Web3 users, or a passkey for email users. It never touches our servers, never enters localStorage, and is cleared when you close the browser.
How PrivaC Works
1. Register & Derive Key
Sign up with your email or connect a Web3 wallet. Your encryption key is derived from your credentials via PBKDF2 — no passwords or KYC required.
2. Encrypt & Store
Solana and EVM wallets are generated automatically. Private keys are encrypted with AES-GCM (passkey) or AES-256 (string key) and stored in your browser — never as plaintext.
3. Decrypt On-Demand
When a private key is needed (signing an order, viewing credentials), it is decrypted in memory with Touch ID verification and discarded after use.
Key Features of PrivaC
Encrypted at Rest
All private keys are AES-encrypted in your browser and never stored as plaintext. Decryption requires biometric verification via Touch ID or Face ID.
Passwordless Authentication
Sign in with your Web3 wallet or email — no passwords to remember. Your encryption key is derived deterministically from your credentials.
Passkey-Gated Keys
Private keys are protected by WebAuthn passkeys with biometric gating. Even if an attacker accesses your browser, they cannot decrypt keys without your fingerprint.
Lightning Fast Setup
Get trading in seconds. Keys are generated, encrypted, and stored automatically during registration.
Benefits for Users
Email Registration
Sign up with just your email. We generate Solana and EVM wallets, encrypt the private keys with your passkey, and store them securely in your browser.
Web3 Wallet Integration
Connect your Phantom, Solflare, or other Web3 wallets. Your external wallet signs a message to derive the encryption key — no private key ever leaves your wallet.
Zero Knowledge Storage
Your encryption key never touches our servers or localStorage. It lives in memory only, backed by sessionStorage for page refreshes, and is cleared when you close the tab.
Cross-Platform Access
Access Orderly Network, Vest Exchange, and other integrated platforms with one set of encrypted credentials.
How PrivaC Makes Signups Easy
Traditional crypto platforms store your keys on their servers or require you to manage seed phrases. PrivaC keeps everything client-side and encrypted:
No Passwords for Web3: Web3 users derive their encryption key from a wallet signature — nothing to remember. Email users get a random cryptographic key generated automatically during registration
Biometric Gating: Touch ID or Face ID required to decrypt private keys — XSS attacks cannot silently access your credentials
Encrypted at Rest: Private keys are AES-encrypted in your browser. The encryption key lives only in memory and is cleared when you close the tab
Zero Plaintext on Server: Wallets are created client-side, encrypted, and sent to the server as encrypted blobs for backup. On login, the server returns the blob and decryption happens entirely in your browser — the server never sees plaintext private keys
Experience PrivaC Today
Trade across Orderly Network, Vest Exchange, and more with encrypted credentials and biometric-gated key access.