Crypto Sticker Security

The registry is designed so that a public QR opens the passport while the initial activation secret is never published.

Verify authenticity

Always check the website address: cryptosticker.org. Do not enter payment details or send cryptocurrency at the request of third parties: the official payment service has not launched yet.

QR codes

Scanning a public QR again should only open the passport. The initial activation link is single-use: do not forward or publish it before adding the sticker to your collection.

Report a vulnerability

Send a description, reproduction steps and the potential impact to security@cryptosticker.org. Do not publish personal data or modify another person’s records while testing.