ComicBase Accounts · Passkeys

How a passkey keeps your account safe

Think of it like an old-fashioned wax seal. You carry a signet ring that never leaves your hand — and that one fact is the whole reason a passkey can't be stolen, copied, or faked.

The IdeaA ring, a seal, and a card on file

A signet ring presses a design into wax. Anyone can recognize the design, but only your ring can make it — and the ring stays with you. A passkey works the same way. ComicBase keeps a card showing your seal, so it can recognize your mark; you keep the ring, which never travels. Everything below is just those two pieces, doing their job.

The HandshakeTwo steps, two directions

Step 1

Setting up

You and ComicBase each keep a way to recognize the other.

Your ring presses its design onto a card ComicBase keeps on file
  • You keep the ring — it lives on your phone or laptop and never leaves it.
  • ComicBase keeps a card of your seal's design, so it can recognize your mark later.
  • ComicBase also has its own seal, vouched for by an authority your device trusts.
Step 2

Signing in

Two quick checks — one each way — and neither ring changes hands.

Your device checks ComicBase's seal · then you stamp today's note and ComicBase checks it matches your card
  • Your device checks ComicBase first: is this really our seal, vouched by the authority? If not, it stops.
  • Then you stamp today's note with your ring — a fresh mark, just for this sign-in.
  • ComicBase compares it to your card on file. A match means it's really you — and your ring never left your pocket.
Your ring never leaves your device — so there's nothing to steal.

The Key BoxHow can a simple code beat a complex password?

Fair question: you replaced a 16-character password with a 4-digit code or a fingerprint. That sounds like a downgrade — until you notice what the code actually unlocks. It isn't your account. It's a box.

The ring lives in a strongbox built into your device — the code just opens the box

Your PIN or fingerprint is just the lock on a key box — and the box is a specially protected chip inside your phone or computer. That's where the ring really lives. The code's whole job is to keep the kids out: to stop whoever picks up your device from stamping in your name.

A password has to survive attack from the whole world — anyone, anywhere, can try guesses against it, billions per second if a site's password list ever leaks. Your code faces none of that. It never leaves your device, ComicBase never sees it, and it's useless without the physical device in hand. Even then, the chip allows only a few wrong tries before it locks up — so “10,000 possible PINs” meets “about five guesses.”

So the honest comparison isn't 4 digits vs. 16 characters. It's a code that works only on one device you're holding vs. a password that can be phished, leaked, and guessed from anywhere on Earth. Your fingerprint, by the way, stays in the same box — it's stored as math on the chip, never as a picture, and never sent to us.

Why It HoldsThree things that beat a password

Nothing to grab
The ring stays with you Only impressions travel. A thief — or a leaked database — finds nothing worth taking.
One-way by design
Seeing the seal can't copy it The design is intricate on purpose. Even in full view, no one can carve a ring that reproduces it.
Locked to us
It only works on ComicBase Your ring is registered with ComicBase alone, and only stamps notes we actually issued.

What happens to a fake look-alike site?

A copycat can't show a seal the authority vouched for comicbase.com, so your device notices something's off and won't stamp anything. And because your ring stays with you no matter what, there's simply nothing for the impostor to walk away with. That's the trap that catches phishing — the thing ordinary passwords and texted codes can't stop.

Atomic Avenue rocket logo The same ring-and-seal system protects your account on Atomic Avenue — one more reason to add a passkey wherever you sign in.

Ready to set yours up? It takes about ten seconds on your Sign-In and Security page — sign in, click Add a Passkey, and your device does the rest.

Add a Passkey