Account and keys

One signature opens an account; there is nothing else to keep.

Opening

Pick any Solana wallet and sign a fixed message. Signing sends no transaction: the signature itself is the root your browser derives three keys from.

• A spending key, used to prove a note is yours when it is spent.
• A viewing key, which picks your notes out of the pool's encrypted stream.
• A nullifier key, which marks a note as spent without pointing at it.

A wallet signs the fixed message identically every time, so it reopens the same account on any device. Keys, the signature and every proving input stay in the browser; the API handles proofs and ciphertext only.

Reading the account

On opening, the browser reads the pool's encrypted stream with the viewing key and keeps what decrypts. From those notes it rebuilds the balances, the tokens held, the ledger and the activity list.