惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
爱范儿
爱范儿
H
Help Net Security
V
Visual Studio Blog
J
Java Code Geeks
Stack Overflow Blog
Stack Overflow Blog
Microsoft Security Blog
Microsoft Security Blog
Apple Machine Learning Research
Apple Machine Learning Research
MyScale Blog
MyScale Blog
The Cloudflare Blog
Martin Fowler
Martin Fowler
D
Docker
腾讯CDC
F
Fortinet All Blogs
雷峰网
雷峰网
GbyAI
GbyAI
G
Google Developers Blog
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Recent Announcements
Recent Announcements
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Blog — PlanetScale
Blog — PlanetScale
Engineering at Meta
Engineering at Meta
博客园 - 聂微东
博客园 - 叶小钗

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant
🔐 No Username. No Password. Just a Keypair.
Amitabh Kuma · 2026-04-26 · via DEV Community

If you’ve ever used SSH, you already understand more about Web3 identity than you think.

Let’s walk through it.


🤔 Start with something familiar

When you SSH into a server, what actually happens?

You:

  • generate a keypair (public + private key)
  • place the public key on the server (authorized_keys)
  • keep the private key on your machine

When you connect, the server sends a challenge.

Your machine signs it using your private key.

The server verifies it using your public key.

If it checks out → access granted.

👉 No password. Just proof.


⚡ Now remove the server

What if there was:

  • no single server
  • no central database
  • no company managing access

Instead, imagine a global network verifying your proof.

That’s exactly what happens on Solana.


🌐 Your keypair = your identity

On Solana, your identity is not:

  • an email
  • a username
  • a Google login

It is simply:

a public/private keypair

Your public key becomes your address.
Your private key is your authority.

The network doesn’t ask:

“What’s your username?”

It asks:

“Can you produce a valid signature for this transaction?”

If yes → you are the owner.


🧬 What is a Solana address?

A Solana address is:

  • a 32-byte public key
  • generated using Ed25519 cryptography
  • encoded in Base58 for readability

Example:

14grJpemFaf88c8tiVb77W7TYg2W3ir6pfkKz3YjhhZ5

Enter fullscreen mode Exit fullscreen mode

Why Base58?

Because it removes ambiguous characters like:

  • 0 (zero)
  • O (capital o)
  • I (capital i)
  • l (lowercase L)

Small detail—but critical when humans are copying addresses.


🔏 What does “signing a transaction” actually mean?

Every action on Solana is a transaction.

That could be:

  • sending SOL
  • interacting with a smart contract (program)
  • minting an NFT
  • voting in governance

Before the network accepts it, you must:

👉 sign the transaction with your private key

Conceptually:

signature = Sign(private_key, transaction_data)

Enter fullscreen mode Exit fullscreen mode

The network then verifies:

Verify(public_key, transaction_data, signature)

Enter fullscreen mode Exit fullscreen mode

If valid → the transaction is executed.

If not → rejected.

That’s it.

No login. No session. No cookies.


🔁 Web2 vs Web3 (deep comparison)

Web2 identity:

  • Stored in centralized databases
  • Auth via passwords / OAuth / sessions
  • Controlled by companies
  • Recoverable (password reset)
  • Revocable (account bans)

Solana identity:

  • Derived from cryptographic keys
  • Auth via digital signatures
  • Controlled only by the key holder
  • Not recoverable
  • Not revocable by any authority

👉 In Web2, identity is permissioned
👉 In Solana, identity is provable


🔑 Ownership is mathematical

In Web2:

“You own your account because we say you do.”

In Solana:

“You own your account because you can prove it.”

There is:

  • no admin override
  • no backend database to edit
  • no support ticket system

Only one rule:

👉 Whoever controls the private key controls the account.


⚠️ The trade-off (and why it matters)

This system is brutally simple.

Lose your private key?

  • No password reset
  • No recovery email
  • No customer support

👉 Access is gone forever.

That’s the cost of removing centralized control.

But the upside is powerful:

🔥 True self-custody


🚀 Identity is more than login

Your keypair isn’t just for authentication.

It’s the base layer for:

  • assets → tokens, NFTs
  • interactions → calling on-chain programs
  • governance → voting with your wallet
  • reputation → your on-chain history

And unlike Web2:

👉 You don’t create a new account for each app.

One keypair works across:

  • wallets
  • DeFi apps
  • NFT platforms
  • DAOs

No permission required.


🧠 Why this is a big deal

In Web2:

  • identities are siloed
  • apps own your data
  • switching platforms = starting over

In Solana:

  • identity lives at the network layer
  • apps plug into your identity
  • your data and assets move with you

🧩 Final perspective

A Solana wallet is not just a wallet.

It is:

  • your identity
  • your access layer
  • your ownership proof

All backed by cryptography.

No usernames.
No passwords.
No intermediaries.

Just a keypair.

And once you understand that…

Web3 stops feeling abstract—and starts feeling inevitable.