demo · v135
Key lifecycle explorer
Walk through the full lifecycle of an SPC browser-bound key — creation, signed payment, rotation, and destruction. The timeline lights each step and the compare panel shows how the non-syncing browser-bound key differs from a passkey on the same device.
PublicKeyCredential: ?
1. enroll — create browser-bound key
2. assertion — sign first payment
3. browser keeps the key in this profile only
4. assertion — sign second payment
5. rotate — replace the key
6. assertion — sign with new key
7. clear profile — key destroyed
browser-bound key (Chrome 135)
scope: this Chrome profile
sync: never
recovery: re-enrol with another factor
use case: device-trust signal layered on SPC
sync: never
recovery: re-enrol with another factor
use case: device-trust signal layered on SPC
passkey (WebAuthn)
scope: cloud-synced credential vault
sync: across devices (iCloud / Google)
recovery: via vault provider
use case: account login
sync: across devices (iCloud / Google)
recovery: via vault provider
use case: account login