Two signatures. One private vault.

Connect on your terms.

Sign-in uses Noir’s derived identity key. It does not expose your wallet’s main transparent address or authorize a payment.

1. 01

   Connect your wallet

   Noir reports an address you control. Pasting an address is not sign-in.

2. 02

   Sign in to GhostMarket

   A short-lived, single-use challenge proves control of your derived identity key and attests to your receiving address. This signature goes to the sign-in service. No funds move.

3. 03

   Unlock your private vault

   A separate signature derives your vault encryption key locally. This signature and key never leave your browser. Only sign it for the GhostMarket domain you intended to visit.

Sign-in, deterministic vault-key derivation, and encrypted storage must be connected before either signature is requested.