The App That Never Asks Your Name - Praveen Vijayan

Praveen Vijayan

SubscribeSign in

The App That Never Asks Your Name

Praveen Vijayan<br>Aug 11, 2026

Share

Imagine you saw a physical shop with a strange rule that before you can step inside, before you even know you like the place, you must fill out a form. Your name, your email, and your password—and you will forget it the next day. Only then can you browse the shop.<br>You would walk away. Most people do, and this is how most everyday apps and websites work today. What if you want to try a writing tool or an AI assistant today? You need to sign up even before the value is delivered. The toll booth comes before the road.<br>I spent the last few months working on a different idea. It is called Earned Identity , and I recently published a research paper about it.

To be fair, taking people in without a form is not a new idea. Games have offered "play as guest" for years. Firebase and other big platforms let apps create invisible guest accounts. Anonymity at the door is a solved problem.

In every system running today, the moment you want to keep your work safe, the anonymity ends. Enter your email to save your work, or sign up with the form. Earned Identity is the first design where you never pay that price. You get the full safety of a real account: backup, multi-device, phishing proof, and the app still never learns your name.

This article explains the idea in plain language—no computer science degree needed.<br>The problem

Here is the thing most apps get backwards.<br>When you open a notes app for the first time, the app does not really need to know who you are. It only needs to answer a much smaller question later on: “Is this the same person who wrote these notes yesterday?”<br>Those are very different questions.<br>“Who are you?” needs your name, your email, a password — a whole interview at the door.<br>“Are you the same visitor as before?” needs none of that. A cloakroom solves it with a numbered ticket.

Most apps run a border-control desk when all they need is a cloakroom.<br>Passwords have many problems. We forget them, we reuse them, we write them in a sticky note, and when any services or any companies get hacked, which happens constantly, millions of passwords are leaked at once. You use that password for a different app, and it's exposed to thieves. Now they have keys to those doors too.<br>Companies patch this with "forgot password" emails, security questions, and verification codes. Each repair is another moving part that can break.<br>The research world has known for years that the best fix is to stop using passwords altogether. Your phone already knows how: when you unlock it with your face or fingerprint, no password travels anywhere. Modern passkeys built by Google, Apple, and Microsoft together bring the same trick to a website.<br>The idea: identity should be earned, not demanded.

Here is the whole paper in one sentence:<br>You should not need an identity to start using an app. An identity should grow out of your use of it.

It works in two stages. Let me walk through both with the cloakroom.<br>Stage I

You open the app and start working. No form. No pop-up. Nothing.<br>The moment you first make something—write a note, save a draft—your browser quietly creates a random ticket. Think of it as a cloakroom ticket with a number so long that no one could ever guess it: not a 2-digit number, but a number with 78 digits.<br>Your browser keeps this ticket. When you come back tomorrow, it shows the ticket, and the app hands you your work. Same visitor, same notes.<br>You never saw a form. You never typed a name. You may not even know the ticket exists.

Now, a fair worry: “If the app stores my ticket, can’t a hacker who breaks into the app steal it and pretend to be me?”<br>This is where the design gets careful. The app never stores your ticket. It stores only a fingerprint of it.<br>A fingerprint identifies you, but nobody can rebuild you from a fingerprint on glass. It works the same here: the app can check “yes, this ticket matches this fingerprint,” but a thief who steals the app’s entire list of fingerprints holds a stack of useless smudges. There is nothing to log in with, nothing to sell, and—because you never gave a name or email—nothing personal in the pile at all.<br>A burglar breaks into the vault and finds it empty. That is the whole point.

Stage II

Tickets have a weakness, and the paper is honest about it: lose the ticket, lose the coat.<br>If you clear your browser data, or your laptop dies, your invisible ticket dies with it — and your work is gone. For your first five minutes of doodling, who cares. But one day the app holds something you would hate to lose. That is the moment—and only that moment—the app speaks up:<br>“Want to keep this safe, and open it on your other devices? One tap.”

You tap. Your phone asks for your face or fingerprint, the same as unlocking it. Done.<br>Behind that one tap, your flimsy paper ticket was traded for a passkey —a modern digital key stored by your...