Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“sometimes I need to log in fast but then end up having to go back into my password storage open the whole app and look for it there”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4e5c97bc0db7014313d7c07adb1b5100fdd0c64e301d172c6c31e0477cb9eb20
Signature (Ed25519, base64)
nzCsjhH+dbCFviz61JXms7ES4xXE7YQ+qULbCsrMVImA/FpXN66uHyWLHO8jtp8g36h6o9u+eau9i0g375IZCA==
Merkle root
4591ccf5fcdb01ed421243d02df5f30203ce391c077d4ade1ff5ee97e69e252d
Merkle path
["4e63d7c0b211a631dce6e5df57a7c38c34b167eaaf2b3a2e90ce486b3abe732a","c438c6b053f73a0afae8aa0986839729c41c0a63ec58662052ce538ef7d058df","a0d38d7fd2b3b426f64354aea1b8b4b87de6af4a839669bc5c02aad669ee0133","88b9bc35cf71e3dd4f4103f871a44adc1e38804ba03fc39f0613ec9ffd9ea3f2","6827c7fc9d960855c43a378a46f507ad728efdfb5a98e78fafcd2a4db65c4b71","2013ad07b690ade30fee149d29c6fc4a17892cd3e99717acb3aa1467f00845bb","0feb48933bb719bece338da4833a346e079bc84936dd5366884ce41246c32376","e9a16e06cd428a141538722295fcaa63f4b69fc788df71b0cf79f44cf22298e7","cdbc0d4c0ff2949a5906768de15a29975ea0caf6302f43a18dead67fb86b5cce","e5ccc501b25f2b209070d83c6e1a6a543aa166692551970d5032e1cf2fa05d79","56d0cb2e44514ff61c37fc874aeee9bbe14a6c6f881656a90e54dab1f94afaa8","71deffdc3e60d0983d04bac22af47799e28ca987643ad6dda198476b887a69da","d52611af45c7ef524ab63e970b046a1061f8173af77bce3332bb854291964d99","04789af0aae7a52bbc7d5e129e675a1c89df82999aa606ccdd23b89f718c4ff3"]
Anchored
2026-10-16
Public log entry
search.sigstore.dev, log index 3273084324 · entry 108e9186e8c5677a4edd…
Expected log hash
52df3e0fd214b96d6c701f5f337408916b7566fa39826e2404f759c290be1eab The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792120358245","kind":"published-quote","locale":"en","page":"brand:dashlane","quote":"sometimes I need to log in fast but then end up having to go back into my password storage open the whole app and look for it there","rating":2,"review_date":"2026-10-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.dashlane","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4591ccf5fcdb…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.