Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Now I have to change all my passwords for the online platforms, apps, and services I use because I don't remember them all.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
45275077d6f47aa4a4c6a248d56503bf60cfe78ff16e4bf917adc3c5f373113b
Signature (Ed25519, base64)
61Qq9uGmewpJrpdiSpE6D4ZA9ktEjD/qaP+ltqoModZww98g6q4PHFiQ/gv9Pk+JPXo6sZMHgqeCdPu+SQaABw==
Merkle root
92de3fc6370869ec6c1d0482494ff1816d45e719fbf27ec8d8d02933c2b7c658
Merkle path
["452a7b95afaa9c28d662ec3e0530c0c7378f201a3f26ed93057ddaf21ecc3809","1637359cac92540443634d4ddcac7f8ad616d7e9813193c67dda3aed21753128","252b663d89f104b59b3f791ded0083ea23a034094a64ee64f8bc5fc1186a9a84","cc5082f0802c600eb2140c2c37967f872dcbc0c282d74385528df618a1e94748","8ddf740b74df8a4472d4775cfdcb99b0c7bd1567cd412c885209a840aae51441","fd499ce108209d0d33b0271a0f118d49f3d505c92dec58e1adf3c50e4b953c54","61a7b8bdc3a7ba8ba257ee39c0b1e9e196c231a3d9cd492ab02c79d74f8ed9d9","0c0f6b487ba1b2b3d2b5038a5d50da43b8090c710515f3734b7a90c5eef0fdb1","4cf33dfb0a750454269d6a458347f2dd22a474d4a4550b2dcd82aa78484c76a6","170ac31bcd66d1808e84010c18e684ff954d6d57c6e3c7f6bd3f837730eeedb6","cca0352ebc7d1b4bb6e8ec9e0343410ade4117b1e3765801b87324134a8e05e6","f5d259741f203720e985e48d0a630724656018606cb625007cf097f32a75e0e7","a509e8f4d2cb543c440130ca624f7c471ea935c47688fc6a0e46ce109d6bda79","4e60c8870052117ad280950bee2be0f8a355cdc9c18fd48de6f1a997eb38ac39","a501be5c1ab88f300525e7c01289a28bce17334eb0d8acf270b9e649519761c4"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3102753131 · entry 108e9186e8c5677a9761…
Expected log hash
5cca28352ab3a467a358005e8b17999e96a5be0f2e71c2152bf575d4cd8c238a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791264491480","kind":"published-quote","locale":"en","page":"theme:bitwarden/returns/en","quote":"Now I have to change all my passwords for the online platforms, apps, and services I use because I don't remember them all.","rating":1,"review_date":"2026-08-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.x8bit.bitwarden","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (92de3fc63708…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.