cahier say “ka-yay” identity without email

A shared notebook for groups that decide together.

Chat, shared documents, votes and events — for clubs, collectives and neighborhoods.

No email, no phone number. One private token creates your identity and signs everything on this device. It is never sent to Cahier.

New identities are not open on this network yet — they arrive with the genesis ceremony (G1). If you already hold a token, sign in above.

> unlock

Use your root token.

Paste it here. It is handed directly to an isolated signer and cleared from this field before any request is made.

root token Remember this device — a revocable device key signs future sessions; the root token stays rare. Leave unchecked on a shared computer.

> recover

Use your recovery token.

This prepares a full replacement of your keys. Your member ID, groups and history are kept. The old root token stays able to cancel during a visible safety window.

recovery token

> new tokens

Save both NEW tokens before continuing.

These replace your old tokens once the recovery activates. They are shown once. Cahier cannot recover them for you.

new root token · daily access

Replace the old root token in your password manager with this one.

new recovery token · store separately

Keep it away from the new root token — printed in a drawer, a safe, a second vault. The old recovery token stops working once this recovery activates.

I saved both new tokens in separate safe places.

> scheduled

Recovery scheduled.

> created locally

Save both tokens before continuing.

These are shown once. Cahier has no email and no phone number: if both tokens are lost, nobody — including the operators — can recover this identity.

root token · daily access

Your everyday key. Save it in a password manager (1Password, Bitwarden, iCloud Keychain…) — it signs you in on any device.

recovery token · store separately

Your emergency key. Keep it in a different place than the root token — printed in a drawer, a safe, a second vault. After a visible safety delay it can replace every key, even if the root token is stolen.

A plain text file holding both tokens. Print it or move it somewhere safe, then delete the download.

I saved both tokens in separate safe places. Remember this device — a revocable device key signs future sessions and the root token stays rare. Leave unchecked on a shared computer; revoke it anytime from identity → trusted devices. public display name

The only thing other members ever see. The server itself stores public keys, never your tokens.

▮

Signing on this device…

Preparing a short-lived challenge.

WebCrypto · Ed25519 · local signer worker

cahier > common work, together.

your groups

local preview

group / active

Common Ground

18 members

group notessigned messages

Message

> active now

signed members—

> next event

> open poll

pinboard / shared work

shared documents

Everything the group is working from.

attachments

Files shared with the group.

+ upload file

group decisions

Visible choices, explicit outcomes.

> informal poll boundary Choices are linked to member IDs, visible to the service, non-anonymous and non-binding. Secure voting remains a separate future system.

calendar

Meet online or in person.

inbox

Signed invitations to your groups.

notifications

What happened while you were away.

G0 · approved

Identity without email.

Your identity is controlled by a high-entropy token. It stays inside the signer running on this device and signs short-lived challenges locally.

root token: local only
server record: public keys
recovery: separate token + social path
voting: separate credential domain

Recovery pending.

Security alerts.

trusted devices

s2 / group collaborationd1 + r2vanilla js▮

Technical preview

> new group

Create a shared space.

The exact group intent will be signed by your local identity before it is created.

name description

illustration

community

landscape

sprout

notes

craft

maker

visibility

> edit group

Update this shared space.

name description

illustration

community

landscape

sprout

notes

craft

maker

> rotate root

Replace the daily access token.

The current auth key will sign the transition. Your recovery token is not changed.

new root token · shown once

I replaced the old root token in my password manager.

> invite member

Invite an existing identity.

This signed invitation only grants access to this group. It does not create an identity or network membership.

member ID group role

> root unlock

Confirm with your root token.

This action changes your identity, so the device key is not enough. The token is handed to the local signer and never sent.

root token

> members

Group members.

> markdown document

Create a shared note.

title Markdown

> shared document

> event

online

> standard event

Schedule time together.

title description · optional

illustration

calendar

meeting

walk

workshop

online

gathering

format starts ends

> informal poll

Ask a visible, non-binding question.

Every choice remains linked to the member who made it.

question additional infos · optional options · one per line closes