Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“all my login info secured and synchronized in all my devices”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
41108691f6059f9f7828cbf14adfa6a4ebc0723a870c63f172465f153140d228
Signature (Ed25519, base64)
/WQJENRB4bPpWSogLW72m05Tf8qXFPqt601se/WTyXX9kqZiWaLCt3pNBvEGFF7sQTU+J0pN0H/KMsInGrZrBQ==
Merkle root
f2e4180d5a0710e7663a4b79dbb50303bd6f86e3a2b406f14001987f705300d7
Merkle path
["411a04d68a1ad1cd1a7a1d6ce14cc27dd04cf981cdb67e99026f73d21df3d065","38350785f881c35835b59f9c863431c428af93a6e2171720f989f1d89e046723","6764c87b6f61e9d2b2e17e148bfd09bb10824a40957422c207ebc61a6751b920","637a8ab2caa4aff9176b25116b5e7ee6b40d37f0dae67d21723eb33d6e56281b","bbb2ba00cf1922a2856999bf24892866623c27c3dab952e418c031e61914ea86","59052aee0d7649d33bbb5171603261658bf94488c81423dc9229862e3ebc196e","2376f156905e948a40d3fe5d5a3150cb9bb69cf79f7af96acd0bb745d028180d","8f38a09776d0cff8d7a27c07f9ca5b1f008f6ba266201fb0ea87ec25a9b995bb","bcdfa939c78b1cee91f28117732a559ebf25ac4d5474b140b904a419705f0af0","fbab91d7c2970219bc59c90d09ab122a259855f01bbd0df17fbba9bba87a0654","9fb375ad1f8351fed2bcb7bc351b1b5a1eef75f3eba55f790bb6b46fec76fa64","ca76c1ec7bb54dfba0dcf403e68beebde5ef8981308d5decd9b72a7fdc4fb13f","039d1a9733830326fcb3d2385978534fb925aa34aba793b08df59fc23cbbb411","a6e8e25a2ba90cb0272e9c8b0abe3d0d6e1acdfc88815c674818da4404f1095d","e9f01260bd0385751f2505473f49304ca5856588aee517e499b7a694c94e66cd"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081458408 · entry 108e9186e8c5677a9490…
Expected log hash
083ecc94bbb96677ba7c17fb105e7b1917457374ba5e9cc48c412762603877bd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791172602574","kind":"published-quote","locale":"en","page":"theme:dashlane/delivery/en","quote":"all my login info secured and synchronized in all my devices","rating":5,"review_date":"2026-08-15","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2e4180d5a07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.