What is this?
When you use Vanitas, a private key is created on your device. These 8 automated checks prove generation stays local, randomness is real, and nothing leaves for the network.
Web Crypto API
idleNative Ed25519 support in your browser
This is the technology that creates your keys. If your browser supports it natively, address generation is up to 125x faster than alternatives.
Random Number Generator
idleCryptographically secure random number generator
Your private key is essentially a giant random number. If the randomness is weak or predictable, someone could guess your key. This test makes sure the random generator works correctly.
Randomness Quality
idleStatistical test on 10,000 random bytes
We generate 10,000 random numbers and check if they're evenly distributed — like rolling a fair dice thousands of times. If some numbers come up way more often, something is wrong.
Zero Network Traffic
idleNo data leaves your browser during key generation
The most important check: we verify that absolutely nothing is sent to the internet while keys are being generated. Your private key should never leave your device.
Security Headers
idleContent Security Policy restricts data exfiltration
Even if malicious code were injected, these browser-level rules block it from sending data anywhere. Think of it as a firewall built into the website itself.
Worker Isolation
idleKey generation runs in isolated background threads
Your keys are created in separate "workers" — isolated mini-programs that run in the background. They can't access the main page and can't be tampered with by browser extensions.
Code Integrity
idleSHA-256 fingerprint matches the published build
We compute a unique fingerprint (hash) of the code running on this page and compare it to the one published on GitHub. If they match, the code hasn't been tampered with.
Key Generation Test
idleGenerate and validate an actual Ed25519 keypair
The final proof: we create a real key, sign a message with it, then verify the signature. If this works, your browser can securely generate Solana addresses.
Build integrity
Worker fingerprint
The key-generation worker has a SHA-256 fingerprint. Compare it with the published build to confirm the code matches the open repository.
SHA-256
Loading...
Verify yourself
1. Review source linked from vanitas.fun
2. Build worker: npm run build:worker
3. Compare public/worker-hash.json with the hash above
Transparency
Live network monitor
Every network request this page makes. If key data were leaving, you would see it here.
Click "Start Monitoring" to see every network request this page makes.
Navigate around the site with monitoring on — you'll see exactly what gets loaded.

