Live demonstration

Watch an approval get bound to exact values

Fill in what is being approved. REAL AUTH creates a real approval request, shows you exactly what was bound to it, and then shows what happens to that binding if a single character changes.

Doar sandbox

This runs the production code on this domain, in the test environment. Nothing here moves money, reaches an invoice, or counts towards the public figures.

What is being approved?

Change any of these values — they are the ones that get bound.

A payment An amount to a named beneficiary. A change of bank details The request behind most invoice fraud. A sign-in Somebody asking to sign in as you.

Amount, in cents

Whole cents, so 8750.10 euro is 875010. Amounts are bound as whole numbers because a decimal like 8750.10 cannot be stored exactly in binary, and two systems hashing "the same" amount could end up with different results.

Currency

Beneficiary

Reference

What you get back

The exact values that were bound, the canonical encoding of them, and the SHA-256 fingerprint of that encoding. You can recompute the fingerprint yourself from the string we show you — nothing has to be taken on trust.

You can create and inspect a request without an account. Approving one is different: it needs a passkey registered to your account, because that is the whole point — an approval nobody could have given without the right device.

Create an account and add a passkey