Sovereign Identity
Hold your ML-DSA-65 keypair on the device. Sign in to platforms with one tap. Selective claim disclosure. Replaces every login that holds you hostage.
A keypair on your device. A signature on demand. Every password you would otherwise lose.
DigiD has lost public trust. eIDAS 2.0 demands wallet-grade identity by November 2026. No European competitor runs post-quantum cryptography in production. SPEAQ does, today.
Six steps. Your private key never leaves the device. The platform learns nothing it does not need.
A 32-byte random challenge plus a session identifier, valid for 300 seconds.
The nonce is presented as a QR. The platform opens a WebSocket on the session.
The app parses the request and shows the platform name and the claims requested.
On user confirmation the app signs the nonce locally with the ML-DSA-65 private key.
The signature, the DID, and any presented credentials reach the platform direct.
Verification against the resolved public key. No password to store, no token to leak.
SPEAQ ID is a dedicated app, separate from SPEAQ messenger. Two features in one PIN-locked vault. Identity to sign in. Passwords to never lose. No chat, no calls, no token economy. Audit it, install it, ignore the rest.
Hold your ML-DSA-65 keypair on the device. Sign in to platforms with one tap. Selective claim disclosure. Replaces every login that holds you hostage.
Every password, secure note, and 2FA code in one PIN-locked vault. Cross-device sync, zero-knowledge. The 1Password alternative that does not hold your secrets for ransom.
Has its own PIN. Even if your phone is unlocked, your passwords stay locked.
Native, Secure Enclave plus PIN-encrypted keystore. App Store-listing separate from SPEAQ messenger.
Coming Q3 2026PWA on app.speaq.id. Browser-installable, desktop and mobile, no install required.
Open app.speaq.idSame architecture as iOS. Recovery via Google Drive encrypted backup.
Phase 2Beyond the public key you chose to present. No phone number. No email. No browser fingerprint sent to a vendor in another time zone.
The first wave is the Plexaris ecosystem. Each pilot proves a different verifiable credential type. Nothing speculative, partners ready.
Verified teacher status across smart-teaching networks. Subject areas, expiry, school issuer.
CEFR-aligned English diagnostic credentials. A1 to C2, score, retake history, assessor signature.
Employment and payroll credentials for HR teams. Contract status, role, country, employer-signed.
Supplier-side credentials for foodservice. Registered, verified, certified tiers, country of origin.
Legal practitioner status plus per-document signing seals. Bar-registration, jurisdiction, hash.
Farmer-issued harvest credentials for smallholders. EUDR-compliant, plot-bound, traceable to source.
A TypeScript SDK that wraps the Sovereign Handshake. One CLI command scaffolds API routes, Prisma model, and i18n keys. React component drops on any login page. NextAuth provider factory included.
Want to know more? Email frank@plexaris.com.
Three tiers. Metered per verified signature. First thousand on Pilot Pro are free.
Traditional email + password storage looks cheap until you count the bill.
| Cost item | Legacy auth (DIY) | SPEAQ ID |
|---|---|---|
| Data storage | € 200-600/mo PII-encrypted databases | € 0 - stateless, nothing to encrypt |
| Compliance | € 5.000+/yr DPO hours, DPIA audits | Minimal - privacy-by-design |
| Support load | 20% of tickets = password-reset | 0% - users hold their own key |
| 2FA cost | € 0,05-0,10 per login (SMS/email) | € 0 - cryptographic, no providers |
| Liability | You are the vault. Breach = you pay. | User holds the key. Vault is not in your building. |
Two paths. Both end the same way: working SPEAQ ID login in your service within hours.
npx ... init scaffolds everything: API routes, Prisma model, i18n. ~60 minutes per service.Source code is closed. The SDK is distributed only via Plexaris-issued tokens or managed installs - no public registry.
Privacy by design across nine EU domains. Documentation produced before features ship. A compliance package will accompany every SDK release.
Full bundle will be downloadable from portal.speaq.id/compliance on SDK launch.
Identity. Files. Sign. Vault. More to come. One foundation, one design, separate apps.