Nothing to steal
No password is ever created, typed, or stored — so there’s nothing to phish or leak.
Sign in by approving, not typing.
Sign in to sites without a password. You approve a request in NULL, and a post-quantum assertion proves it’s you — nothing to phish, nothing to leak in a breach.
Passwords get phished, reused, and dumped in breaches. NULL Login replaces them: a site asks for a sign-in, you approve it in NULL, and your identity returns a dual-signed assertion (classical + post-quantum) bound to that request. There’s no shared secret for a site to store or an attacker to steal.
No password is ever created, typed, or stored — so there’s nothing to phish or leak.
The assertion carries an ML-DSA-65 signature alongside the classical one — future-proof proof of you.
The site learns only that you approved; your identity and other services stay yours.
It opens a NULL login request with a challenge — no account form, no password field.
Confirm the request; your identity signs the exact challenge, classical + post-quantum.
It checks the signed assertion and logs you in — with no secret it has to keep safe.
The same handle that seals your messages signs you into the web — phishing-resistant by design.
Open in NULL →