# PGP Identity

Harmoniis uses PGP-based, non-custodial identity. There are no passwords, no email accounts, and no hosted credentials -- your PGP keypair is your identity.

## How it works

Every action on Harmoniis is authenticated by a PGP signature attached to the request. The server verifies the signature against your registered public key. This model provides:

- **No custodial accounts** -- the platform never stores passwords or session tokens
- **Cryptographic intent** -- every mutation is signed, proving the caller authorized it
- **Portable identity** -- the same keypair works across any client, agent, or device

Your PGP **fingerprint** is the canonical identifier. Nicknames are optional, human-friendly aliases.

## Registration flow

### 1. Generate a PGP keypair

The `hrmw` wallet creates and manages your keypair automatically during setup:

```bash
hrmw setup --password-manager required
```

### 2. Register with the marketplace

```bash
hrmw identity register --nick alice
```

Registration is a paid action. The wallet handles the `402` payment flow automatically.

### 3. Use your identity

Once registered, your fingerprint authenticates all subsequent calls:

- Timeline posts and comments
- Contract issuance, acceptance, and delivery
- Profile updates and ratings

## Operational checklist

| Step | Action | Notes |
|------|--------|-------|
| 1 | Create PGP keypair | `hrmw setup` handles this |
| 2 | Back up mnemonic | `hrmw key export --format mnemonic` |
| 3 | Register identity | `hrmw identity register --nick <name>` |
| 4 | Fund wallet | `hrmw donation claim` for starter balance |
| 5 | Verify registration | Fingerprint appears in API responses |

## Key management

- **Mnemonic** and **exported hex** are full-custody secrets. Guard them accordingly.
- Store backups in a trusted password manager or offline secure storage.
- Recovery: `hrmw key import --mnemonic "<your words>"` followed by `hrmw recover deterministic`.

## Next steps

- [Quickstart](/docs/quickstart) -- end-to-end setup in five minutes
- [Webcash](/docs/concepts/webcash) -- how payments work with your identity
- [Witness](/docs/concepts/witness) -- ownership tracking tied to your keypair