1 Build brainprint on this laptop live
Just interact normally - type, move your mouse, scroll, click. Your behavior streams to GrayPass in real time. The button unlocks from server-confirmed frames and signal coverage. Time is guidance, not proof.
The trust score will sit near zero until you build the brainprint - there is nothing to score you against yet. Open the Telemetry pill in the top-right to watch every signal being captured.
Waiting for the first server telemetry snapshot.
Why behavioral identity beats device identity
Passkeys are a property of the device. Lose the device, lose the key. Get a new laptop, set up a new passkey. Magic links verify whoever controls the email inbox - exactly what a SIM-swap attacker is targeting.
GrayPass verifies the human behind the keystrokes. Six modalities scored in parallel: keystroke dynamics (dwell + flight time), pointer kinematics (speed, curvature, overshoot), scroll cadence, and focus patterns. Phone touch and motion feed separate bounded touch and neuromotor paths.
The desktop-shaped signals make a 54-dimensional summary vector used by the device-invariant core. Phone-native neuromotor and touch evidence are scored separately. The summaries are non-invertible: we cannot reconstruct what you typed from the dwell-time distribution.
Templates are cancelable. A leak rotates the key, not your identity. And the device-invariant core can be compared across hardware. Tandem still learns device-native behavior separately: laptop keystrokes stay here, while phone neuromotor and focus learn on the phone. Touch remains bounded corroboration rather than a claimed learned identity template.
2 Transfer to phone
Scan the QR with your phone's camera. Token expires in 90s.
3 GrayPass network waiting
Every beat below is backed by an authenticated snapshot or API response. Missing fields stay visibly waiting; laptop keystrokes are never presented as translated phone touch.
- Phone connectedWaiting for a phone session.
- Resonance samplingWaiting for server frames.
- Invariant core matchWaiting for the server gate.
- Temporary trust loanWaiting for loan detail.
- Phone-native learningTouch readiness has not been reported.
- Brainprint syncedWaiting for a versioned sync snapshot.
Source and target waiting
Transferability map
Core signals carry only when the response says so. Touch is learned natively.
Waiting for phone...
phone trust (live)
Simulate an attacker on the phone
We inject bot-shaped feature frames into the phone session and the real engine scores them. The temporary loan stays visible until a real network alert withdraws it. Only a server-critical verdict can trigger the cascade.