Flowsta Signing DNA

What is Flowsta Signing DNA and what is it for?

Flowsta Signing DNA is the Holochain network code behind Flowsta Sign It, a service that lets someone sign a file and later show that they signed it and on what terms. It keeps cryptographic signatures over file fingerprints on a public network, so anyone can check a signed file without an account and without asking the project that made it.

Flowsta Signing DNA is the signing layer behind Flowsta Sign It, a service for signing files and checking those signatures later. Flowsta keeps three Holochain networks apart so different data gets different treatment: a public identity network, an encrypted private one for email and sessions, and this public signing network. Signatures are meant to be public and permanent, and giving them their own network keeps verification independent of the identity and private data held elsewhere.

To sign a file, an app hashes it and asks Flowsta Vault, the desktop app that holds the signer's keys, to sign that hash. The key stays on the signer's device and every signature is approved in a dialog. The record carries a timestamp and the signer's terms of reuse, including a licence and a policy on AI training, and it can add a short public note or a small preview image. Signers can take a signature back, and the revocation is itself a signed record shown beside the original.

A photographer can sign an image once and later match a resized or re-encoded copy back to that signature, because the record can carry fingerprints designed to survive editing. Verification is open to anyone: drop a file on the Sign It verify page, where it is hashed in the browser, or look the file's SHA-256 hash up through the public verification API. The project's documentation at docs.flowsta.com/sign-it sets out the signing and verification flow.

From 4 public sources, checked 23 September 2026.