attestfor.me

FAQ

Everything you need to know about ATtestfor.me

What is ATtestfor.me?

ATtestfor.me is a verified link page for your online accounts. You know those link-in-bio pages (like Linktree) that list all your accounts in one place? This is that, except every account listed has been cryptographically proven to belong to you. Visitors to your profile can be certain the links are genuine and not faked or impersonated.

Why is that better than a normal link page?

On a normal link page, anyone could claim to own any account just by typing it in. Here, each account is only added after you prove you control it by posting a unique code to that account. Only the real owner can do that. The proof is stored publicly and permanently, so anyone can independently check it at any time.

How do I prove I own an account?

  1. ATtestfor.me gives you a short unique text snippet to post.
  2. You post that snippet to the account you want to verify, for example as a public GitHub Gist.
  3. You paste the link to that post back into ATtestfor.me.
  4. ATtestfor.me fetches the post and confirms the snippet is there and correct.
  5. If it matches, the account is added to your profile as verified. Done.

What does "cryptographically verified" actually mean?

The proof is mathematically tied to your identity in a way that cannot be forged or quietly altered. The snippet you post contains your unique identifier and a random one-time code, so it can only ever refer to you and that one verification attempt. Once stored, the record is tamper-evident: changing it causes the fingerprint of the data to change, and that mismatch is immediately detectable.

What is AT Protocol and why does it matter here?

AT Protocol is an open standard for decentralized social apps. Every user has a permanent, unique ID called a DID. Your data, including your verified account links, lives in your own personal data repository that you control. ATtestfor.me reads and writes to that repository. Your profile belongs to you and persists regardless of what happens to this site.

What are public keys, and do I need to care about them?

Most users can skip this entirely. For more technical users: you can publish your PGP or SSH public key on your profile. This lets others encrypt messages to you, or confirm that files and code commits were signed by you, all tied back to your AT Protocol identity.

Is my data private?

Your verified account links and public keys are publicly visible. That is the whole point: people can look you up and trust your profile. ATtestfor.me never sees your private keys or passwords. Login uses the standard AT Protocol OAuth flow and no credentials are shared with this site.

Do I need a Bluesky account to use this?

You need any AT Protocol account. AT Protocol is an open ecosystem with many apps built on top of it, including Bluesky, Tangled, Blacksky, Leaflet, npmx, Witchsky, and more. What you need is an AT Protocol account with a DID and a handle, from any provider. Anyone can view profiles without logging in; you only need to sign in to create or edit your own.