Key wrapping self test

Proves the identity key can be wrapped under two separate keys and opened again by either one. Run it on each family device, especially the iPhone.

1. Wrap and store

Makes a placeholder identity key, wraps it with a passphrase, and stores the wrapped copy in this browser's database. Nothing is sent anywhere.

Test passphrase

2. Reload, then unwrap

Reload this page first, so the unwrap starts from an empty page and has to read the stored copy back. That is the part worth proving.

3. Checks that need no passkey

Runs the same code path with a stand in for the passkey secret, so the maths can be checked on a device with no biometric hardware. This does not prove your passkey works.

Results

Ready.