10 min read
CardanoWall publishes a small proof record on Cardano, not your file. A hash-only proof exposes only a digest, while a sealed proof keeps the content encrypted off-chain — here's exactly what becomes public.
The StandardSecurity
10 min read
A CardanoWall identity is one 32-byte Identity Seed. Save that seed and you can restore your signing and receive keys in any Label 309 tool; lose it and you lose future use of that identity.
SecurityGuides
10 min read
A receive address is the public address someone uses to send you a sealed Label 309 record. It is safe to share — unlike your private Identity Seed, which it can never reveal.
GuidesSecurity
10 min read
Share a receive address. Your client scans the public Label 309 feed and locally decrypts the records your keys can open — no server-side mailbox, no recipient list on chain.
GuidesSecurity
10 min read
In CardanoWall, signing, sealing, and decryption all happen locally — the gateway publishes proofs and stores ciphertext but is designed never to receive your private keys.
Security
9 min read
Commit a private dataset snapshot to a hash or Merkle root and publish one timestamped proof. The data stays private; later you can selectively prove a file, row, or version was in the committed set.
AI & ProvenanceSecurity
8 min read
Sealed Label 309 records timestamp encrypted evidence on Cardano and deliver it to specific recipients, so the timeline is public while the plaintext stays confidential.
SecurityCompliance & Legal
9 min read
A sealed Label 309 record can timestamp encrypted evidence and deliver it to one chosen recipient — but it does not make you anonymous or replace legal and safety advice. Here is what it does and does not do.
Compliance & LegalSecurity
10 min read
How a security team can timestamp and seal incident evidence as it is collected — a durable, independently verifiable timeline that proves what existed when, without publishing sensitive details.
SecurityCompliance & Legal
9 min read
CardanoWall stores your identity as encrypted vault ciphertext, never plaintext seeds. Here is exactly what the server holds, what only your passkey can open, and why your seed is the real backup.
Security
8 min read
A passkey does not become your CardanoWall identity — it unlocks an encrypted vault that only your authenticators can open. Here is how WebAuthn PRF makes daily access easy without making CardanoWall a seed custodian.
Security
7 min read
Yes, you still need to save your Identity Seed even with a passkey. The passkey is a convenience unlock; the seed is the portable identity that works across CardanoWall, the CLI, SDKs, and any Label 309 tool.
SecurityGuides
8 min read
In the browser, CardanoWall keeps unlocked keys in session memory and writes only encrypted vault ciphertext to IndexedDB — never plaintext Identity Seeds or private keys.
Security
7 min read
Public computer mode stops CardanoWall from writing identity data to the browser, so a shared device keeps no trace after you leave. It does not make a compromised machine safe while you are signed in.
SecurityGuides
7 min read
Synced passkeys roam across your devices; hardware keys stay device-bound and physically controlled. CardanoWall can use either to unlock your identity vault when WebAuthn PRF is supported — and the Identity Seed stays your real backup either way.
Security
7 min read
Removing a passkey re-encrypts your current CardanoWall identity vault to the remaining factors and hard-deletes the old ciphertext — real revocation going forward, but it cannot undo access that already happened.
Security
8 min read
CardanoWall sees account, billing, and public proof data. By design it does not see your plaintext Identity Seed, your private keys, or the plaintext of a sealed file.
Security
6 min read
A receive address is a public key, not a name. Before you seal a sensitive file, confirm the recipient's address through a trusted channel — encryption can work perfectly and still send to the wrong person.
SecurityGuides
6 min read
Whitelist mode is a per-identity CardanoWall inbox filter that shows records from your trusted contacts first. It does not change the Label 309 record format or block anyone on Cardano.
GuidesSecurity
7 min read
A team can share a CardanoWall identity by sharing its Identity Seed — but that hands every holder full signing and decryption power, with no partial or per-person revocation.
GuidesSecurity
8 min read
Deactivating or deleting a CardanoWall identity changes how your account uses it, but it never changes the cryptographic validity of records already published on Cardano.
GuidesSecurity