Skip to content
monstera®
Explore
Start building
Authentication

Authenticator catalog

Select an access model based on proof semantics, operational risk, and recovery requirements.

Supported strategies

  • Password: straightforward action-bound proof; best for demos and controlled environments.
  • Password Minute Signature: a password-derived signer rotates each minute.
  • Wallet Signature: allowlisted addresses sign fresh EIP-712 actions.
  • Dual Factor: requires both password-minute and guardian signatures.
  • Password OR Wallet: either configured method may approve an action.
  • API Key Session: scoped TOKEN mode for automation plus ACTION mode for administration.
  • MultiAuthenticator: routes verification to one of several configured child authenticators.

Selection rules

  • Prefer wallet signatures for externally controlled administrative keys.
  • Use dual factor when one compromised credential must not authorize spending.
  • Keep session-token TTLs short and scope masks narrow.
  • Retain at least one recovery path before rotating an authenticator.
  • Only use authenticators approved by the factory or explicit custom-consent path.