VAULTLESS
Your password is how you move.
The problem VAULTLESS solves
Passwords, OTPs, and 2FA codes can be stolen, phished, or coerced out of people, yet most authentication systems have no way to detect or respond to these scenarios.
VAULTLESS solves this by replacing static credentials with a behavioural biometric profile built from how you naturally type and move. It captures keystroke rhythm, mouse dynamics, touch patterns, and device motion, signals unique to you that can't be lifted from a database or handed over under pressure.
It specifically addresses three gaps existing systems ignore:
Stolen credentials: no password means nothing to steal or phish
Coercion: if someone forces you to log in, VAULTLESS detects the stress in your typing pattern and silently redirects the attacker to a decoy session while alerting your security contact
Audit gaps: every authentication event (success, failure, or duress) is permanently logged on an Ethereum smart contract, giving you a tamper-proof record
No specialist hardware. No shared secrets. Works on PC, Android, and iOS- using touch and motion sensors on mobile for an even richer behavioural signal.
Built for anyone who needs security that protects people, not just accounts.
Challenges we ran into
Scoring consistency: Early on, the same user would get different scores across attempts due to minor typing variations. Fixed it by averaging three enrollment samples and weighting hold times 3× so the dominant signal carried more influence.
Tuning the duress zone: Deciding where "stressed but plausible" should sit took a lot of trial and error. Too tight and real users got flagged. We added a second condition, rhythm variance must exceed 2.5× the enrollment baseline, so both signals had to fire together.
Mobile sensor fallbacks: Different browsers expose different APIs, and iOS requires a permission prompt most users dismiss. Built the engine to fuse whatever signals are available so it never fails hard, keystrokes carry the full weight when motion data is absent.
Tracks Applied (1)
Ethereum Track
ETHIndia