Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Trying to export your data to transfer service to another password manager is not a visible option”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
a8fda6c6ee88cec4a7857c8c6a7260deabac3ae7a6f858d557a875d3c238cdba
Signature (Ed25519, base64)
D+Kxu07WxVmlqr6LTvee8qnEWHKhUmiRmpmO3wDA/C0haYIBx0zcNRZqahT+gXTjwkSA4/0e643rAsjXLnnlAw==
Merkle root
1b26d1b85473caad1868633ec4c931eb970e81199eea87926818f3f1753af37b
Merkle path
["a8fc145c22be242133000b8dc28e3e02b676753e6d32c847e2b7112a5d4f61a5","3c29ede7cd268322f048ec6321a9258737fb8ce31e95302f2eb4ad1f6f7634ac","9994b3471fe28b8e3fb527df19e7c28c0ea6aa2b4ddeefb17ba636650e32eade","675fc36070e68a0b4fa378838e937da177b2ce4c2f8a7ad8a6552c144182ec3f","d797ef593ca3cc4682e09e630de04dd3b4a75b7fdac70cc3210375313bbfb6f1","6544cee618fcd7d15fe71da1d5a7a1c06c7cc6062aeeedf6274696b6aa1afeac","37bcade7ec23c46717b0ebf9eda7abbe53b9ce3e9d51f1d3f5940179eb685719","e49ac8124a647ec23bcd5fb56f2e4ca34aeb628310d4ed42002cb41f2e60e602","e25610ff37d2dab596aa51c6d12bc9f5385dee8813303502d907605cfbff3cbc","7220349dc3c8f32a5da20995e0894cf4ef3e980cb669b79a9d5cf0171c83b8e4","03f6a52edfa03eee5b9343b82adef3d439d8164bdfb0c287191f3cc7be57636e","b777021cb51f63e820e93fd9380015ecf012671cab543d5fced13e3651d329ff","c0dee208cfc82bb58ef8bfbdce70ae59669cc0fafa6229438e70014c20ddc06e","f13bd3931ffab245c82268d5388ec4e7a23a41a86394a369b97f89216cceb3ad","06054c91b82ccf7b99bb6b4fcb7c60afa97f93295e6829b75e5bf1efe9493e63"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3138947147 · entry 108e9186e8c5677a2712…
Expected log hash
8f66b765b7efcb11dcdcf57b81c46ed3317a5895f5b870638e23b76f1efbb2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791425549743","kind":"published-quote","locale":"en","page":"brand:nordpass","quote":"Trying to export your data to transfer service to another password manager is not a visible option","rating":1,"review_date":"2026-08-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.nordpass.android.app.password.manager","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b26d1b85473…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.