Skip to main content

12.1 Password-Based Authentication

What PTERI replaces — and why it is no longer needed

This section compares PTERI with legacy and modern alternatives, and explains which systems become obsolete once cryptographic authority is the foundation.

PTERI does not coexist with multiple trust models.
It collapses them into one.


Legacy Model vs PTERI

CategoryTraditional ModelProblemsPTERI Replacement
AuthenticationPasswords stored or hashed on serversPhishing, credential reuseNo passwords
Account RecoveryEmail or SMS-based recoveryRecovery channels can be hijacked (SIM swap, email compromise)No recovery secrets
Multi-Factor AuthenticationMFA layered on top as a patchAdds complexity, still relies on shared secretsNo MFA add-ons
Credential StorageCentralized databases of credentialsDatabase breach exposureNo credential databases
Operational ComplexityMultiple systems layered togetherComplex recovery flows, high operational overheadSingle wallet signature primitive

What Changes Fundamentally

Legacy AssumptionIn PTERI
Secrets must be storedNo secrets stored on servers
Credentials prove identityCryptographic signature proves identity
Authentication is layeredAuthentication is native to the primitive
More layers = more securityFewer trust surfaces = stronger security

Core Principle

"If there is no secret, there is nothing to steal."

Wallet signature replaces the entire legacy authentication stack.