Signing In with Passkeys
26 March 2026
If you've been following our blog, you may have read our earlier post about how we handle player identities. We use cryptographic hashing to make sure we never store your personal information in our database, and we rely on established identity providers like Google and Apple so that we don't have to ask you to create a separate Greenleaf Creations password.
That system has served us well, but it still has one dependency that some players may not be comfortable with: to log in, you need a Google account, an Apple ID, or another third-party identity provider. We've always thought of this as a privacy trade-off rather than a privacy solution. Your identity is secure in our database, but you still have to tell Google or Apple that you're logging into one of our games.
Passkeys eliminate that dependency entirely.
A passkey is a cryptographic credential stored on your device. When you register a passkey with Greenleaf Creations, your device generates a pair of keys: a private key that never leaves your device, and a public key that we store in our database. When you log in, your device signs a challenge with the private key, and we verify the signature with the public key. Your device authenticates you using the same biometrics you already use to unlock it: Face ID, a fingerprint, or your PIN.
From your perspective as a player, the experience is simple. Tap the passkey button, confirm with your face or fingerprint, and you're in. No password to remember. No third-party login screen. Nothing.
From a privacy perspective, it's an even bigger step forward than our original design. We never see your email address or any identifier from a third party. We store only a public key, which is mathematically useless without the private key your device holds. And you don't have to share any information with Google, Apple, or anyone else just to play a game.
Passkeys are available now in all of our games, alongside our existing identity provider options. If you already have a Greenleaf Creations account, you can link a passkey to it through the Manage Account screen, so you can use either your existing login or your passkey going forward.
We've always believed that the best privacy protection is the kind you don't have to think about. Passkeys are a perfect example of that philosophy in action: the experience for the player is simpler than ever, and the privacy guarantees are stronger than ever. No passwords, no third parties, no data to leak.
This is the direction authentication is heading across the industry, and we're proud to be early adopters. For a small independent company, implementing this kind of cryptography from scratch was a significant undertaking, but it was worth it. Our players, especially the parents entrusting us with their children's gaming experience, deserve the best privacy protections we can offer.