Human Approval · Strict testAbout this demo

Your device.
Show the evidence.

Browser-only research. No name, email or password to enter.

Checking trusted-device metadata…

Start here on Android, Apple or Windows. Your device may offer to save a test credential; the server will not enrol it. This check reports evidence, not human approval.

Device verification demo

One deliberate action.

Set up a passkey once. Then verify with Windows Hello, your Android device or your Apple device.

Checking browser support…

Ready when you are.
Server-checked result

Awaiting approval

Your device keeps the private key. The server checks the signed response.

Challenge
Not requested
Device verification
Not yet verified
Completed
—

Evidence first. No silent fallback.

Check my device examines packed, TPM, Apple, Android Key and FIDO U2F responses. It checks protocol validation separately from manufacturer trust and backup flags. Unsupported or missing evidence is not accepted as human approval. Apple and Android responses may lack the manufacturer evidence needed, even after a genuine fingerprint prompt.

The separate strict enrolment and Verify again controls retain the original packed/TPM policy: signed FIDO metadata, certified hardware-protected keys and verification, and a device-bound credential. Earlier unrestricted enrolments do not qualify. Broader diagnostic format support does not extend strict approval permissions.

Private Access Tokens: not integrated. Trusted issuer access and binding to a fresh approval remain unresolved. We do not substitute browser detection, simulated tokens or an automatic device check for human consent.

Diagnostics store a random test reference, format, model identifier, flags and check results, not raw certificates, public keys or biometric data. Diagnostic reports and outcome logs are capped at 10,000 and pruned on new submissions after 30 days. Strict enrolments retain public keys and random identifiers. We never receive your fingerprint, face scan, PIN or private key.

The device may use a PIN. This is a security experiment, not a guarantee of human intent, uniqueness or immunity to compromise. Nothing is authorised outside this demo. Remove test credentials through your device settings if no longer wanted.