Verify a live device

Connect your SelfKnot and watch it prove itself.

Plug in a ZKNOT SelfKnot, press its button, and the signature is checked in your browser against the device's enrolled public key. The verdict below is computed on your machine — not asserted by our server.

Device log — raw lines from the device

(waiting…)

What you might see, and why

This page refuses to claim anything it cannot check. Most outcomes below are not errors — they are the page declining to overstate what a device proved.

VERIFIEDThe device signed a fresh random challenge with the key it holds, and your browser checked that signature. If its key is on ZKNOT's registry you also see the registered tier; if not, it reads SELF-ASSERTED — proof it holds the key, and nothing about which unit it is.
VERIFICATION FAILEDA signature arrived but did not match the challenge. The one case here that is a real alarm.
NO RESPONSE / did not armThe device answered but never produced a signature — asleep, mid-reset, or the port belongs to something else. Nothing failed; nothing was checked. Unplug it, plug it back in, try again.
cannot be verified hereThe device speaks a protocol this page does not use for proofs. A bring-up or development unit signs on command with no button press, so this page will not present its signature as a human attestation. That is deliberate: the press is the product.

Different ZKNOT devices speak different protocols — a SelfKnot, and the OPTIGA-based units, announce themselves and this page adapts. The raw exchange is in the device log above, if you want to see it.