Blog
Notes from the vault.
Engineering notes on authentication protocols, product boundaries, and the decisions behind ZKAuth. Each article separates what shipped from what remains constrained.
Engineering / August 10, 2026
What changed when we moved to Turbopack
The warm build got faster, the cold build did not. Here is what the measurements changed in the dashboard and what they do not prove.
Read the post
Cryptography / August 9, 2026
Authentication that never sees the password
How a ceremony-bound proof replaces the password in a ZKAuth login request, plus the risks that zero knowledge does not remove.
6 min read
Engineering / August 9, 2026
When replay protection is unavailable, login stops
Why ZKAuth rejects a proof when its single-use registry cannot make an atomic decision.
5 min read
Security / August 9, 2026
Why project API keys stay on the server
A project key identifies one backend environment. It is not a user session, a browser credential, or an authorization shortcut.
3 min read
Company / July 6, 2026
How we label product readiness
Available, preview, and experimental describe different levels of support. Here is what each label means in ZKAuth.
3 min read
Product / June 15, 2026
Where hosted authentication should stop
The callback, branding, and browser boundaries that keep a hosted login page from becoming an unsafe website builder.
4 min read