HOLD · AN ACCOUNT WITH NO PASSWORD
You cannot lose a password you were never issued.
An ORBIS account is a key fingerprint. Not a row with your email in it, not a profile, not a marketing record with a preferences page. It is small on purpose, and the smallness is the feature.
The one thing this page is about.
What we hold when you have an account with us — which is close to nothing — and how you get at it, take it away, or delete it.
What an account actually is.
When your phone made its key, it produced a short fingerprint of the public half — a string of characters that identifies the key without revealing anything about you. That fingerprint is the account. It is what a proof is issued against and what a request is approved with.
There is no password because there is nothing for a password to protect: proving the account is yours means proving you hold the key, and only your device can do that. Nobody can brute-force it, nobody can reset it over the telephone, and nobody can phish it out of you because there is no secret for you to be tricked into typing.
What we hold, and what we do not.
On our side
- The fingerprint of your public key.
- Which organizations have vouched for something about you.
- Whether each of those is still standing or was taken back.
Not on our side
- Your private key — it never left the chip in your phone.
- Where you showed a proof, or to whom. Checking needs no account with us.
- A password, a security question, or a recovery email.
Both columns are printed at the same size and the same weight, which is a design rule on this site and not a courtesy. A list of what a company holds is only useful next to the list of what it does not.
Signing in, without a secret.
Signing in is your device answering a challenge with the key it holds. On the machine that serves your account this is one door, and it is a real one — the probe that gates every link on this site reached it on 2026-08-30.
Your account, on the cell This opens the machine origin, not this site. Receipts live there, and we never proxy them — a proxied receipt is not a receipt.
Getting your data, and getting rid of it.
Export is one call. Erasure is one call, and it happens on the spot: no ticket, no reviewer, no thirty days. The two endpoints have their own page, with what each one returns and what it cannot reach — export, erase, and the two endpoints.
Check the shape of it yourself.
You do not need an account to see how the account behaves. Two commands, both of which you can run right now against the machine that serves it.
Recorded — measured 2026-08-27, by these commands
The account is behind a session, and says so plainly when there is not one.
curl -s https://id.orbis.id/account/data{"error":"account session required"}
A refusal in one line, in words. Not a redirect to a login wall, not a blank page.
The contract marks the account routes as needing a holder session, not an API key.
curl -s https://id.orbis.id/openapi.json | jq -r '.paths["/account/data"].get["x-auth"]'HSESS
Your session, from your device. There is no operator key that opens your account from the other side.
Before you go any further.
The account described above exists and refuses you correctly when you are not signed in. What is around it — a portal you can browse, a wallet on your own phone, a way back in after losing that phone — is a different question, and here is where each of those stands.
The portal you sign in to, the wallet on the web, getting back in, and the wallet on a phone.
- PLANNED A wallet a person installs from an app store. wallet-native You cannot hold a credential on a phone you own. Everything a person would do with a proof waits behind this.
The register holds 17 live · 2 partial · 2 planned · 5 not yet.
3 of the 4 capabilities this page depends on have no row in the register yet, so this page will not print a state for them. They are named rather than dropped, because a slice that silently shortens itself is the same defect as a claim with no receipt.
- holder-portal
- wallet-web
- account-recovery
The register route serves, but it carries no row for these yet. List what it does carry:
curl -s https://id.orbis.id/api/site/register | jq -r '.entries[].slug'Straight answers.
- Do I need to give you an email address?
- No. An account is a key fingerprint. If you choose to give an address so something can be sent to you, that is a thing you added, and export will show it to you and erasure will remove it.
- Can I have the same account on two phones?
- No, not today. Each device makes its own key, so each device is its own account. Joining them is the same unsolved problem as getting back in after losing one, and it is stated plainly on the recovery page.
- Can an operator at ORBIS open my account?
- The account routes are marked as needing your session, and there is no key on our side that substitutes for it — the second command above is how you check that claim rather than believing it. What an operator can see about holders is a separate surface with its own access rules, and it is not this one.
- If I delete the account, do my proofs stop working?
- Proofs you already showed were checked at the time and stay checked. Proofs still on your device stay on your device. What goes is the record on our side that ties them to a fingerprint, which is most of what there was.