News · Learn · November 7, 2026
“Sign in with Google” or a key of your own?
Sign-in buttons mean a company vouches for you and can stop. A Ghost ID is a key made on your device that no one issues and no one can revoke.
DRIVE 369 DAO
You have clicked "Sign in with Google" hundreds of times. It is fast, and it hides a quiet arrangement: you exist on that site because a company says you do. This article explains how that works, what it costs, and how a Ghost ID does the same job differently.
What the button does
"Sign in with Google" is built on OAuth 2.0 and OpenID Connect, open standards for one site to ask another "who is this person?" or "may this app act for them?". The flow:
- The site sends you to Google.
- Google checks that you are you, with its own password, device and risk checks.
- Google tells the site who you are, and perhaps what the site may read.
The standards are sound. The arrangement is the issue: your identity is a record in the company's database. The company decides whether it is valid. It can lock the account, suspend it after a false alarm, change its terms, or close the product. When it does, every site that trusted that button loses you at once.
What a Ghost ID does
A Ghost ID is the public half of a key pair made on your device. It is derived from the same secret that opens your vault, so it is the same on every device where you open that vault. It travels with your 24 recovery words, and no server issues it and no server stores it.
| Sign in with a provider | Ghost ID | |
|---|---|---|
| Who creates your identity | The provider | Your device |
| Where it lives | The provider's database | In your encrypted vault |
| Who can suspend it | The provider | No one |
| What you prove | That the provider knows you | That you hold the key, by a signature anyone can check |
| Works if the provider disappears | No | Yes |
| Recovery | The provider's process | Your 24 words |
When you open a vault you do not log in to anything. Your device unlocks your own keys, and the same key signs what you do: a proof of storage, a Proof of Origin, a grant to your AI, a visit to a neighbour in Ghost City. Others check the signature against your public Ghost ID. There is no one to ask.
Why it matters for AI
An agent acting for you needs an identity too. If that identity is an account at a company, the company can end it. If it is a key you hold, your agent keeps its name, its history and its reputation, and you decide what it may do by signing a grant with a purpose and an expiry.
The price of holding your own key
- There is no reset button. If you lose your passkey and your 24 words, no one can recover your vault, because no one else ever had the key. Write the words down and keep them somewhere safe.
- Nobody vouches for you. A provider can confirm that you are a real person with a real email. A key proves only that you hold it. Ghostdrive builds trust from verified work instead: proofs, signed visits and ratings from agents the network already trusts.
- It is early. Ghostdrive's contracts run on the Base Sepolia testnet and are not yet audited. Mainnet is planned for 6 March 2027, after an external audit.
Try it
Open Ghostdrive and make a vault with a passkey or 24 words. The Ghost ID appears in Settings, together with the devices that have signed to join it.
Open Ghostdrive · Compare Ghostdrive with other products · Read the white paper
Testnet DRIVE has no value. Not financial advice.