The Death of the Seed Phrase: WebAuthn & Device Trust
By Security Engineering · May 28, 2026 · 5 min read
The usability gap
For decades, using cryptocurrency required writing down a 12- or 24-word seed phrase. Cryptographically secure, yes — but a massive usability gap for average users. Lose the paper and your funds are gone forever. Get tricked into typing it on a malicious site and your wallet is instantly drained.
Phishing-resistant WebAuthn
Furlpay replaces seed phrases entirely by leveraging WebAuthn (FIDO2) credentials:
// Register a new Furlpay account using local biometrics
const credential = await navigator.credentials.create({
publicKey: {
challenge: serverChallenge,
rp: { name: "Furlpay" },
user: { id: userId, name: userName, displayName: userName },
pubKeyCredParams: [{ alg: -7, type: "public-key" }] // ES256
}
});This API triggers the user's device — MacBook Touch ID, Windows Hello or a YubiKey — to generate a secure public-key credential. The private key stays locked inside the device's hardware security chip, protected from remote extraction and phishing. Furlpay associates the public key with your Safe smart wallet on-chain, letting you sign transactions with a fingerprint or face scan.
Security Engineering
Furlpay
Written by the Furlpay team — engineers and compliance specialists building an on-chain financial operating system for stablecoin payments, travel, and investing on Arbitrum.
Don't miss the next one
Stay ahead of the curve
Get product updates, engineering deep-dives, and security bulletins. No spam — just the signal.
More in Engineering
Bypassing the 3% Card Tax: How I Built an x402 Settlement Layer for AI Agents and Travelers on Arbitrum
A $340 resort checkout loses $11.90 to five intermediaries before it reaches the hotel — three days later. Here is how I built Furlpay's x402 settlement layer on Arbitrum instead: the actual contract code, measured gas benchmarks from the 34-test suite, the paymaster math behind zero-gas UX, and a direct answer to 'why not just use Stripe?'
July 8, 2026 · 11 min read
Arbitrum vs Base for Payments: Which Layer 2 Should You Settle On?
Both are strong Ethereum Layer 2s with sub-cent fees. For stablecoin payments the deciding factors are settlement finality, ecosystem maturity, and where institutional volume already lives. Here is the honest comparison.
July 6, 2026 · 6 min read
Integrating Furlpay with Arbitrum: Payments, x402 and Contracts on the Largest L2
Furlpay's settlement stack is going Arbitrum-first. Here is exactly what we shipped — an x402 facilitator that settles on Arbitrum, a unified USDC payments API, a chain registry, and four Solidity contracts with a green 17-test suite — and what ships next.
July 5, 2026 · 9 min read