Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I forgot my master password and now i have to reset everything which is annoying”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4d07dbbc033b4ad09e13870bdb866facff90481550f88b43f226df15031789cd
Signature (Ed25519, base64)
3BQ+TXSTLRk545Ck7WMTgc3jYYPRebPzHE6m1pZKTJDpGa2GJSS2akA1NZlCYd2inWQ9IvW3leQxcJq3Lc8hBA==
Merkle root
1b0b408c7cf60721bf3cca50f4b7f268b0858a42fba11906e486c6694252cb22
Merkle path
["4d027d30861816fe7643436c82fbddbc3341f69dd2f4ff9b14fc8bbe0d9708ac","7390e801874571b25a4e6b42bc8058dd5101d3bc6a800ae4e49f4c5b39ccdfce","0276790df78121419de28844f4b06e29d0a386cb48ecb5909289798e818e621d","013d44126588198ac369cad1b1fcf10b7ef9cb3e23c36865de3c88749d7ba88b","9e656f4da060138a3e439121ea43776e691ab2426247a1d3a1ec092a0aa65eed","30b30cb4104640a0771a381a89cc97d63937b1b69b08d6cb0d0090a1fb06fc00","957b34588b37333835cec8205d43968631b8b72196843205078f8cc98993ee6a","47218a6f682877bf703cf83d012fe2915cea8d121e6922cdaa2cc3eba0277794","9a411c9b0ce28b516cbea40dc698d33e9b53b322880b294d51e9f5ec26adb463","c29ebf7cd77050ea1ec26b3571d03df5ce670b85430cd288a957493f195de050","e17d8e9ff94efe92b55c6dd5f917ff12be0cdde94f4a34cd1badcff751846bb5","cf447dfb6dce6b5d81ae8302a2a58a74ffebf3f56c78349476d09cc10653e60d","a35aaf4615d6d52528c83ebb3bc75a27f09df1b160bd5ce58f5b6dfb09d28482","8547750c311d384cbb1a945300d6b6fb4f4bd2b78af7177366b3baa4b4c1e724"]
Anchored
2026-10-12
Public log entry
search.sigstore.dev, log index 3220996539 · entry 108e9186e8c5677add5d…
Expected log hash
00694de1434e648cba57bf07fb439ed90ba501083441667555bcf619bf5edce8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791779426071","kind":"published-quote","locale":"en","page":"theme:bitwarden/returns/en","quote":"I forgot my master password and now i have to reset everything which is annoying","rating":4,"review_date":"2026-08-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.x8bit.bitwarden","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b0b408c7cf6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.