A passkey cannot be a native Solana signer, because Solana signatures are <code>ed25519</code> and passkeys are <code>P-256</code>. Instead, each transaction carries a <code>Secp256r1SigVerify1111111111111111111111111</code> precompile instruction. Its data holds the compressed public key, the signature, and the signed message, all in plaintext. The precompile's program id is in the transaction's account list, so an indexer can list every transaction that uses it and group them by the 33-byte key inside. Every vault, program, or app verified by the same passkey falls into one group, even if each vault has a different address.

The secp256r1 instruction publishes the same 33-byte public key every time you sign.

One passkey links every transaction

Passkey wallets typically derive the vault as a PDA from the passkey, for example <code>seeds = ["passkey", sha256(pubkey)]</code> under the wallet program. Seeds and program code are public, so the mapping is too. Anyone who sees your passkey's public key, from a single transaction, a backend log, or a shared signature, can run <code>findProgramAddressSync</code> and get your vault address. From there they can read your balances and full history.

Vault PDAs are derived from public seeds, so anyone with the key can compute the address.

One secret passkey links every transaction