KeyWay runs a dedicated Fiber node for each user. It stays online, so payments can arrive while the app is closed.
- Nothing runs in the user's browser
- Encrypted node backups
- KeyWay's host holds the node key
nodeMode="managed"Give every user a CKB account the moment they sign in with email. No seed phrases or extensions, and Fiber payments built in.
Open source under MIT. React SDK on npm.
For your users
For your team
Wrap your app in one provider, register your domains in the dashboard, and use the hooks wherever you need them.
import {
KeyWayProvider, useKeyWay, useCkbWallet, useFiber,
} from "@ckb-keyway/react";
export function Providers({ children }) {
return (
<KeyWayProvider appId="keyway_8fK2mQ7xL1pVn4sR9tYc0bWd">
{children}
</KeyWayProvider>
);
}
export function Checkout({ invoice }) {
const { authenticated, login } = useKeyWay();
const { balance } = useCkbWallet();
const fiber = useFiber();
if (!authenticated) return <button onClick={login}>Sign in</button>;
return <button onClick={() => fiber.payInvoice(invoice)}>Pay</button>;
}Every user gets their own Fiber node. Choose where it runs with one provider prop.
KeyWay runs a dedicated Fiber node for each user. It stays online, so payments can arrive while the app is closed.
nodeMode="managed"The node runs inside the user's tab with WebAssembly. Channel state stays on their device.
nodeMode="browser"Security model
We publish exactly where keys live and who can act on them, including the limits of an early release.
Read the full security modelThe CKB signing key lives in Lit's secure hardware and is never exported to your app.
Users approve every transaction before it's signed, and can require an emailed code for large transfers.
Fiber keys and node backups are encrypted at rest.
Each app has its own users, sessions and one-time codes.
KeyWay's backend authorizes signing, and approvals appear inside your app's page. Lit doesn't yet verify the user on its own.
Managed nodes run on KeyWay's infrastructure, which holds their fiber keys.
Access to a user's inbox can recover their account until 2FA ships.
KeyWay runs on CKB testnet and has not been audited yet.
Under the hood
KeyWay accounts are ordinary secp256k1 lock addresses built with CCC. Inspect them in the CKB explorer like any other address, and pay any Fiber invoice on the network.
Register an app, add your domains and ship email sign-in today.