Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I keep a backup in my safe of all passwords, never rely on just one source for them.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4d47fa796e152996330b1d29cf3107192f541fee669c25c1c2133c29dbad9a96
Signature (Ed25519, base64)
0ihV9h5+W/Ras4sfVlmdb/s3u/4CjWh3Tjdu0z4Xuq8o4E7SZWy9mE+hnKpAOgpwY3mqoVjEC67uo5Dt7aJiBw==
Merkle root
f2e4180d5a0710e7663a4b79dbb50303bd6f86e3a2b406f14001987f705300d7
Merkle path
["4d47f94bbf664c930e5ee52acfff775212c95a75b78d0296fedc8e62bcf48692","57e6a812ef6b503f3934cfba69327c4c0c8d8561e5685c4787234febeb31b92e","9ad081a717e81172f16a0c2ff9783cfdb093a3e578d0133f68e3375195a5eae9","caa66b8cf3b02ef632b49e0d62ee123a4ff30cdd92f56a61ac5f9df50b6f0f9f","820c46696df59213979fd477d79ec75bbe4d5dbaba9c0a953cb1446c076e7c2f","d60da38f7e8784b27df0703f69f11ed0a01564280642bbcfc63a9f0d99537032","0caacab510a492face3d12239161f195641a89f7f6df6687b20bff3808a264e6","3546a5cf4606643934b4cd2a7b28a78bf6c609492e0c0afb56ac5ffe601e9b0e","edd567871b014b6e79aa631c6f61c9d2e228cab1f9003ee69b45441f45416619","94139afc2fba777ca306fb29f19492a5b5524a0649c15d92d679699d9b0f1835","5253f06534080ae2ee847aecb72e5282fcc76a86a067646a31646b2ece1f2670","cb6f5361d0bdfc2f067bec39754c3cc2773873266c01703278fd62fdd7b9208e","46c87f9a08f1f246fdfec5275340122c6fc82f05348c2147438d88f4190e91a4","2e5c89ae9ab7dbc565d9c1cf67eadb6709ebdf774f99038c61564ed1fae236de","e9f01260bd0385751f2505473f49304ca5856588aee517e499b7a694c94e66cd"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081458408 · entry 108e9186e8c5677a9490…
Expected log hash
083ecc94bbb96677ba7c17fb105e7b1917457374ba5e9cc48c412762603877bd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791172602574","kind":"published-quote","locale":"en","page":"theme:bitwarden/returns/en","quote":"I keep a backup in my safe of all passwords, never rely on just one source for them.","rating":5,"review_date":"2026-01-03","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/69592e18b3643e077373c380","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2e4180d5a07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.