Observed arrival · 2026-10-30
SoftKey’s origin-checking browser authenticator
SoftKey creates a passphrase-sealed signing key in the browser and says it signs only for the origin named in a challenge.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- People using sites that request origin-bound signatures
- Worth noticing
- It explicitly says SoftKey is not a hardware secure element and that malware on the device can still request a signature.
Field notes
The page exposes a key-creation form and separate areas labeled “Your keys” and “Recent activity.” At capture, the vault displayed “Loading vault…” and the activity area said nothing had been signed. Navigation also links to Northline, Agents, and Sites, but the extracted text does not explain how those pages relate to SoftKey.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
◎NicheUnusually specific use
One card from the complete issue