How It Works
One Identity.
Many Apps. All Yours.
Sign in, sign your work, and run apps you actually own - all from one identity that lives with you, not in a company's database. You decide what connects, what's shared, and what stays yours.
Your Identity, Finally Yours
You've probably seen the headlines - passwords leaked by the million, accounts locked overnight, AI trained on people's work without asking. Different stories, one root cause: your identity is rented. Every login lives in a company's database - to be breached, sold, or switched off. Flowsta flips it: your identity is a key you hold, not an account someone grants.
No database to breach
There's no central store of your data to leak, sell, or subpoena. Your information lives encrypted on your own device - not sitting in one company's database.
No one can deplatform you
Your identity isn't a company's to suspend. It's yours, on a peer-to-peer network nobody owns and nobody can switch off - including us.
Not even we can read it
Zero-knowledge by design. Your keys derive from a 24-word recovery phrase that never leaves your device. It's mathematically impossible for Flowsta to read your data.
Your sovereign identity is the foundation of all of this. Explore Flowsta Identity →
What You Can Do With It
One identity. Three things you can do today - with more arriving.
Sign in with Flowsta
Sign in anywhere
Click 'Sign in with Flowsta' wherever you see it, approve in your Vault, and you're in - no separate accounts, and no passwords anywhere for a site to leak. One identity across the whole web. Sites like The NOW Times already use it.
Try it - the button works right here
Powered by Sign It
Sign your work
Your identity also signs files. Prove you made something, declare how it can be used, and let anyone verify it - forever, with no central authority. In an age of AI and deepfakes, that's how you prove what's real and what's yours.
A Growing Ecosystem
Real apps and sites already build on Flowsta - and the list keeps growing. A few examples:
The NOW Times
A news and trending-topics platform. Readers sign in with their Flowsta identity - no new account, no password to leak.
ProofPoll
Verified polls where one vote means one verified identity and no one can rewrite the result. Runs in Vault, owned by the people who use it.
Your app here
Anyone can build on the open standard - add sign-in, the Sign It API, or ship a Holochain app. The ecosystem grows with every one. Yours could be next.
How It Actually Works
Under the hood - in plain language.
A key, not an account
Your identity is anchored by a 24-word recovery phrase, created with your Vault and held by you alone. It rebuilds your account on any device - and nobody can reset it for you, because nobody else has it. Write it down and store it safely.
Zero-knowledge by design
There's no password anywhere in the system. Your keys derive from your recovery phrase on your own device, and your data is encrypted with them. Flowsta holds none of it - we couldn't read it if we tried.
Lives on a network, not our servers
Flowsta is built on Holochain - a peer-to-peer network where everyone has their own chain. There's no central database to breach, and no off-switch.
Verification works without us
Anyone can verify a Flowsta login or signature independently. If Flowsta disappeared tomorrow, your identity and your signed work would still stand.
Curious what it's built on? Flowsta runs on Holochain - an independent, open-source project (not a blockchain, no token, no gas). More on the tech →
How Flowsta Compares
See how Flowsta stacks up against the alternatives.
| Feature | Flowsta | Traditional SSO | Password Managers | Web3 Wallets |
|---|---|---|---|---|
| One login everywhere | ||||
| Zero-knowledge privacy | ||||
| Censorship resistant | ||||
| You own your data | Depends | |||
| Sign your work / files | ||||
| Verify file authorship | ||||
| AI disclosure metadata | ||||
| Offline desktop logins | ||||
| Two-factor auth | ||||
| Local-first storage |
Build on Flowsta
Three ways to plug in - pick one or combine them. Your users bring their own identity; you never store a password.
Add Sign in with Flowsta
Drop our login button on your site. Your users bring their own identity - you never store a password again.
Use the Sign It API
Add verifiable signing and content-rights declarations to your app, backed by the same identity layer.
Build a Holochain app
Ship a desktop app that runs in Vault and works with users' Flowsta identity. Fork ProofPoll to start with the hard parts already solved.
Common Questions
Your Flowsta Identity is the foundation - one identity that works everywhere. Flowsta Vault is the desktop app where that identity is created and lives: your keys and your data, on your own device. Sign It is a Flowsta app that uses your identity to cryptographically sign files. One identity, many apps.
One thing: Flowsta Vault, the free desktop app for Linux, macOS and Windows - it's where your identity is created and lives. From there, everything else needs no install: sign in on the web from any browser (even on your phone) by approving from your Vault, and run Holochain apps like ProofPoll right beside your identity, with keys that never leave your machine.
Yes. Creating an identity, signing in to sites, downloading Vault, and verifying signed files are all free - and always will be. Optional Premium tiers unlock shorter usernames, larger Sign It quotas, and priority support. See Premium pricing.
They do different jobs. Your Vault password unlocks the Vault on one machine - forget it, and your 24-word recovery phrase restores your whole identity on a fresh Vault. The phrase is created with your identity when you set up your Vault, shown once, and held only by you - write it down and store it offline, in more than one safe place. Lose the phrase, and no one - not even Flowsta - can recover that identity. That's the deal with truly owning it: your keys, your data; not your keys, not your data.
Yes. Your data lives encrypted on your own device, with keys derived from your recovery phrase. Even Flowsta staff cannot read it - it's mathematically impossible. This isn't a privacy-policy promise; it's built into the architecture.
Holochain is the open, public technology Flowsta is built on. Instead of one shared ledger like a blockchain, every user has their own chain and apps validate data peer-to-peer. There's no token, no coin, no mining, no gas fees - nothing to buy to use Flowsta. Because it's an independent open-source project, apps built on it keep working even if Flowsta itself disappears.
Yes - that's the whole point. Add 'Sign in with Flowsta' with our OAuth SDK, integrate the Sign It API, or build a Holochain app that runs in Vault. Start at the Developer Portal.