惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

M
MIT News - Artificial intelligence
WordPress大学
WordPress大学
GbyAI
GbyAI
S
SegmentFault 最新的问题
量子位
爱范儿
爱范儿
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
MyScale Blog
MyScale Blog
人人都是产品经理
人人都是产品经理
博客园 - 叶小钗
aimingoo的专栏
aimingoo的专栏
V
Visual Studio Blog
U
Unit 42
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
The Cloudflare Blog
Stack Overflow Blog
Stack Overflow Blog
博客园 - 聂微东
J
Java Code Geeks
The GitHub Blog
The GitHub Blog
Y
Y Combinator Blog
IT之家
IT之家
Martin Fowler
Martin Fowler
宝玉的分享
宝玉的分享
雷峰网
雷峰网

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant
From Keypairs to Identity: My First 4 Days Learning Solan...
Bitan Biswas · 2026-04-27 · via DEV Community

When I started the #100DaysOfSolana challenge, I expected to learn tools and APIs. What I didn’t expect was how quickly my understanding of identity would change.

In Web2, identity = usernames + passwords stored by companies.
On Solana, identity = a cryptographic keypair that you own.

This post breaks that down with real code and what I built in my first 4 days.


🧠 Identity = Keypair (The Core Idea)

Every Solana identity is:

  • Public Key → your address (shareable)
  • Private Key → your authority (must be protected)

If you’ve used SSH, it’s the same model:

ssh-keygen

Enter fullscreen mode Exit fullscreen mode

You generate:

  • id_rsa.pub → public
  • id_rsa → private

👉 Solana works the same way—but the entire blockchain verifies you, not just one server.


🚀 Day 1: Creating My Identity (CLI Wallet)

solana-keygen new
solana address
solana balance

Enter fullscreen mode Exit fullscreen mode

This creates a keypair stored at:

~/.config/solana/id.json

Enter fullscreen mode Exit fullscreen mode

👉 Insight:
My entire identity is just a file on disk


💸 Day 2: First Transaction (Ownership in Action)

solana airdrop 1
solana transfer <RECIPIENT_ADDRESS> 0.5

Enter fullscreen mode Exit fullscreen mode

👉 What’s happening under the hood:

  • Transaction is signed with my private key
  • Network verifies using my public key

⚙️ Day 3: Parsing a Transaction (Programmatic Identity)

I built a script using @solana/kit:

import { createSolanaRpc, devnet } from "@solana/kit";

const LAMPORTS_PER_SOL = 1_000_000_000;

const rpc = createSolanaRpc(devnet("https://api.devnet.solana.com"));

const wallet = "YOUR_PUBLIC_KEY";

const signatures = await rpc
  .getSignaturesForAddress(wallet, { limit: 1 })
  .send();

const signature = signatures[0].signature;

const tx = await rpc
  .getTransaction(signature, {
    encoding: "jsonParsed",
    maxSupportedTransactionVersion: 0,
  })
  .send();

for (const ix of tx.transaction.message.instructions) {
  if (ix.program === "system" && ix.parsed?.type === "transfer") {
    const sender = ix.parsed.info.source;
    const receiver = ix.parsed.info.destination;
    const amount =
      Number(ix.parsed.info.lamports) / LAMPORTS_PER_SOL;

    console.log({ sender, receiver, amount });
  }
}

Enter fullscreen mode Exit fullscreen mode

👉 Insight:
Everything boils down to:

  • Accounts (public keys)
  • Signatures (proof of ownership)

🔐 Day 4: Wallets = UX Layer Over Identity

I explored:

  • CLI wallet
  • Browser wallet
  • Mobile wallet

All use the same keypair—but differ in how they protect it.


🦊 Phantom Wallet Use Case (Real dApp Flow)

Here’s where it clicks.

Using a browser wallet like Phantom, you don’t create accounts—you connect your identity.

// Connect Phantom Wallet
const provider = window.solana;

if (provider?.isPhantom) {
  const response = await provider.connect();
  console.log("Public Key:", response.publicKey.toString());
}

Enter fullscreen mode Exit fullscreen mode

👉 This gives you the same public key as your identity.


✍️ Signing a Transaction (User Approval)

const transaction = new Transaction().add(
  SystemProgram.transfer({
    fromPubkey: provider.publicKey,
    toPubkey: RECEIVER,
    lamports: 1000000,
  })
);

const signedTx = await provider.signTransaction(transaction);

Enter fullscreen mode Exit fullscreen mode

👉 Key difference from CLI:

  • Phantom shows a popup
  • User must approve before signing

💡 Why This Matters

In Web2:

  • App controls your identity
  • You log in

In Web3:

  • You control your identity
  • Apps request permission

🌐 Public Keys vs Usernames

Example Solana address:

14grJpemFaf88c8tiVb77W7TYg2W3ir6pfkKz3YjhhZ5

Enter fullscreen mode Exit fullscreen mode

Unlike usernames:

  • Not owned by a company
  • Works across all apps
  • Cannot be taken away

⚖️ Tradeoffs

Web2 Solana
Password reset No recovery
Platform-controlled Self-owned
Easy UX Responsibility

Lose your private key → lose everything.


💻 My Repo

I’ve been documenting everything here:
👉 https://github.com/bitanb1999/100-days-of-solana


🔥 Final Take

Identity in Web3 isn’t something you sign up for.
It’s something you generate and carry everywhere.

  • Public key → who you are
  • Private key → what you control

Everything else builds on that.