Signed access tokens

Every request, signed and accounted for.

Signet issues sealed access tokens for your team's archives. One identity, verified on every call, so the right people reach the right records and no one else.

HS256signed sessions
2htoken lifetime
0shared passwords
Why Signet

Identity you can prove.

◆

Stateless sessions

Each session is a signed token. No server lookups, no sticky sessions, just proof.

⬡

Scoped by design

Members, auditors, and keepers carry their scope in the token itself.

❖

Short lived

Tokens expire fast and renew quietly, so a leaked session is a small window.

Pricing

Plans for every team size.

Start free. Upgrade as your archive grows. No shared passwords on any plan.

Solo
For one
$0 / forever
  • 1 archive
  • 1 device
  • Community support
Start free
Most chosen
Team
$18 / month
  • Unlimited archives
  • Role scopes
  • Audit log
  • Priority support
Choose Team
Keyholder
For orgs
Custom
  • Everything in Team
  • SSO & SCIM
  • Custom key rotation
  • Dedicated support
Contact us
Security

Signed, not stored.

Signet seals every session with a signature, so a token proves who you are without a database round trip. Verification happens on every call to a protected archive.

Scope policyv1
guestread: public
memberread: own
adminread: master
Docs

Questions, answered.

How do I get a token?

Sign in, or try the live demo from the sign in page. Your console shows everything your scope allows.

What do the scopes mean?

Guests see public pages. Members read their own archive. The admin scope reads the master archive across the whole team.

Where is my session kept?

In a signed token, not a database. It carries your subject and scope, and it expires in two hours.

Can I rotate keys?

Keyholder plans rotate signing keys on a schedule you choose. Lower plans use a managed key.

Members

Sign in to Signet

Open your signed console.

New here? Try the live demo: guest / guest

Console

Welcome back

My archive

128 sealed records.

Shared with me

4 tokens from teammates.

restricted

Master archive

Every record, across the whole team.