Authentication

Overview

Lexe has two main authentication methods:

1) Root seed: The root seed is the wallet's master secret. All child keys and secrets are derived from it. The root seed gives total, unrestricted, irrevocable control over funds in a Lexe wallet, and can only be rotated by moving all funds to a new wallet. The root seed is required to unilaterally recover one's Bitcoin if Lexe ever goes away, so it is very important to back it up to a safe place.

2) Client credentials: Lexe client credentials are scoped and revocable credentials encoded as a long opaque string. They are well-suited for building applications with limited access to other people's wallets, including charging for services via pull payments.

The following pages cover these authentication methods in detail.