Quantum-seeded identity | Aexa Post-Quantum Vault

Get a piece and open the Vault

You do not need a piece. The Vault generates a sound identity on your device without one: open the Vault without a piece.

Aexa’s entropy service picks one piece from its stock and marks it as used, so it is never given to anyone else.
Your browser is sent to the Vault with the piece in the address. It travels in the part of the address after the #, which a browser does not include in any request. The Vault removes it from the address as soon as it loads.
The Vault checks Aexa’s signature on the piece. A piece that Aexa did not issue is refused.
You generate your identity. The piece is mixed with your device’s own random numbers, used once, and discarded. You can download a receipt that names the machine and the job the piece came from.

Your device protects your key, not the piece. Aexa issued the piece and its hosting provider handled it, so either could have kept a copy. That is why the piece is only ever mixed with random numbers made on your own device.
Do not share the link. Anyone who has the link the button takes you to has the piece too, and the Vault cannot tell whether it was used before.
A piece is spent when it is issued. If you close the page before generating an identity, that piece is gone. Press the button again for another.
There is a daily limit. To enforce it, the service keeps a keyed hash of your network address for up to three days. It does not keep the address itself, and it does not learn anything about your files, keys or passphrase.
The signature shows who issued the piece. It does not prove how the piece was made. This is not an approved or validated entropy source, and it is not quantum encryption.