Approve from your phone. Your PC still decides.
Pair once. Answer Asks, stop a run and read run transcripts from your phone. Payments need your passkey, and the PC checks it.
Logged as owner:phone. Your PC decides and can still refuse.
Sample data. Photo: Sam Ferrara on Unsplash.
Pair in three steps.
Open the link or scan the QR code
Your PC shows a link and QR code. It works once and expires after 10 minutes. The PC’s name is a setting you choose; it is never in the link.
Create a passkey
Arm it on the PC first: arming lasts 5 minutes and works once. The passkey stays on the phone. Without one, the phone can answer ordinary Asks, but not payments.
Paired
The phone and PC now share a key. Revoke the phone on the PC and it is cut off.
On iPhone, add Cryonic to the Home Screen first for alerts (iOS 16.4 or later). When the PC is off or asleep the phone cannot reach it, and the app says so.
A relay that only forwards bytes.
Holds its own keys. Never talks to agents.
Forwards encrypted frames. Cannot read, change, replay or invent them, and cannot approve anything.
Checks every phone action and decides.
What holds
Messages are encrypted and authenticated under a key only your PC and the paired phone hold. The relay can drop or delay messages, which is the only power it keeps. A phone you revoke on the PC is cut off, and everything the phone does is in the PC’s hash-chained log.
What does not hold yet
Today the relay also serves the phone app. Whoever controls the relay could serve a modified app that acts as your phone. So “the relay cannot be trusted” is true of the messages and not yet of the whole system. Payments still need a passkey you enrolled on the PC. Cryonic plans to serve the app from a separate origin. The hosted relay is not deployed yet.
Join the waitlist.
Leave an email and you will hear when Cryonic is ready.