Let's start with the basics: each device gets its own secret key made just for it - that’s all you need to log in safely!
But what exactly is a trusted key?
A trusted key is nothing more than a simple token - in a format like this:
It is derived from your devices unique parameters, such as salt, IP, and others. And since it is seed-based, it is also unique, meaning every other device gets another unique trusted key generated.
How is a trusted key used?
Think of your trusted key as your password — except there's no username to go with it. That's intentional. Your device's unique parameters are the username. When you enter your trusted key on the login page, Dyscron's system verifies your identity without ever learning your secret. This is made possible by zero-knowledge proofs (ZKP): the server only sees a proof that you know the key, never the key itself.
How does the whole thing work under the hood?
When you first register, your device generates a private key — your secret. From that, a complement master key is derived and sent to the server. Your private key never leaves your device. From your private key, you can then generate a trusted key for every device you own. Each one is unique, bound to that device alone, and proves your identity to the server without ever exposing your secret.
Adding a new device
Already logged in on one device? You can register additional devices by heading to Settings → Authorized devices, where you'll find an option to add a new one.
This will generate a 9-digit code and a unique link.
From your new device - your phone, for example - navigate to that link and enter the code. You'll be automatically logged in and redirected to Settings, where your new device and its trusted key will already be waiting for you.
What if I lose my trusted key?
Losing a trusted key means losing access to that device's session. Since Dyscron never stores your secrets, there is no "forgot password" button. If you do lose a trusted key, you'll need to follow the recovery procedure:
