OrangeCheck — three products, six protocols, one Bitcoin address — OrangeCheck
sign in
live · mainnet6 protocols · 1 family<br>bip-322 · sats × days
>_ orangecheck // identity, on bitcoin<br>You already have an account.It's your Bitcoin address — claim it →<br>There's nothing to sign up for — the address you already control is the login. Sign one message to prove it (BIP-322, never a transaction). No password, no KYC, no custody; coins never move. Shut us down tomorrow and your identity still checks out.<br>✓ BIP-322✓ Nostr kind 30078✓ offline-verifiable✓ MIT / CC-BY-4.0
orangecheck // identity<br>bitcoin walletemail + otp<br>§ bitcoin wallet<br>Sign in with any BIP-322-capable Bitcoin wallet (Sparrow, Xverse, Leather, UniSat, Alby, OKX, Phantom). Paste your address, click sign — your wallet extension prompts for a one-time signature on a short challenge. The address becomes your OC identity. Private key material never leaves your wallet.
bitcoin addresssign challenge · sign me in →> Detection picks the first installed BIP-322-capable extension. Address is the one your wallet will sign for.
After signing in, also link an email — optional, one more signature.
// we store an opaque did:oc and a session id — nothing else. See /privacy.
§ the family<br>Six protocols. Compose freely.
Each protocol is independent — its own spec, its own reference site, its own packages. They share canonical-message, BIP-322, and Nostr kind-30078.
[01]oc·attestlive<br>Sybil resistance via proof of Bitcoin stake.<br>Sign one Bitcoin message; any verifier can check that you have held N sats unspent for N days. The base-layer protocol every other sibling can optionally reference.<br>→ site→ docs
[02]oc·locklive<br>End-to-end encryption addressed to a Bitcoin address.<br>Sealed envelopes that only the device-key-holder of a specific BTC address can unseal. No centralized key server, no account, no message broker.<br>→ site→ docs
[03]oc·votelive<br>Stake-weighted, sybil-resistant polls.<br>Three canonical weight modes (one_per_address / sats / sats_days). Deterministic, pure, cross-impl-testable tally. Polls and ballots are signed JSON.<br>→ site→ docs
[04]oc·stamplive<br>Bitcoin-block-anchored signed statements.<br>Authorship via BIP-322, priority via OpenTimestamps. Replaces PGP + OTS + C2PA in one self-contained envelope. Verifies offline forever.<br>→ site→ docs
[05]oc·agentlive<br>Agent-authorization records bound to a Bitcoin address.<br>Delegate signing authority to scripts, bots, and pipelines within revocable scopes — without handing them your principal key. Every action signed, scoped, revocable.<br>→ site→ docs
[06]oc·pledgelive<br>Pledge your word to Bitcoin. Bond your stake. Anyone verifies the outcome.<br>Forward-looking, BIP-322-signed declarations about future-verifiable propositions. Bond is an OrangeCheck attestation; enforcement is by public exposure, never by custody.<br>→ site→ docs
§ commercial products<br>Three products on the protocol surface. All Bitcoin-bonded, none custodial.<br>Every protocol in the family is open + MIT-licensed. The commercial products are how OrangeCheck stays funded — a consumer Bitcoin identity that pays users in sats (Me), encrypted Bitcoin-addressed secrets (Vault), and Bitcoin-native end-to-end encrypted messaging (Chat). All compose the same primitives anyone else can ship against; all verify offline; all publish their abuse limits and bind to the same charter.
§ For individuals<br>oc·me<br>Your Bitcoin identity, federation-custodied by default, graduable to self-custody at any time. Apps that ask “is this person real?” pay sats for the answer; you keep them. Three-class billable event taxonomy; abuse limits published; bound to the charter. No surveillance, no scoring, no opaque pricing.<br>Consumer wallet · email + Bitcoin sign-in<br>Three-class billable events (A / B / C) · clear taxonomy<br>Federation-custodied default, self-custody graduation<br>You keep the sats apps pay for verifying you<br>Visit me.ochk.io<br>commercial · early accesswait-list open
§ For password-keep converts<br>oc·vault<br>Encrypted secrets, addressed to a Bitcoin address you already control. The vault is end-to-end encrypted and address-addressed — no account, no server-side plaintext, ever. One Lightning payment, lifetime access. No subscription, no key server, no custody.<br>End-to-end encrypted · address-addressed secrets<br>Lightning-only · 210k sats lifetime, no subscription<br>The only key is one you already control<br>No account, no server-side plaintext, ever<br>Visit vault.ochk.io<br>commercial · betaopen beta
§ For private messaging<br>oc·chat<br>Your Bitcoin address is your inbox. Messages are end-to-end encrypted and gift-wrapped over Nostr — no phone number, no account, no server that can read them. Three send modes — speak-now, pay-to-reach, seal-til-block. A mode of OC Lock, not a new silo.<br>Your Bitcoin address is the inbox · no phone, no account<br>End-to-end encrypted · gift-wrapped Nostr transport<br>speak-now / pay-to-reach / seal-til-block<br>Built on OC Lock · verifies offline, no custody<br>Visit...