Flowsta Private DNA

What is Flowsta Private DNA and what is it for?

Flowsta Private DNA is the Holochain DNA in which the Flowsta account system keeps a person's encrypted private records. It exists so that recovery phrases, account email and two-factor secrets can be held in a Holochain app without the people hosting the data being able to read any of it.

Flowsta Private DNA is a Holochain DNA: a packaged set of validation rules and entry types that a Holochain app installs alongside its others. This one holds the sensitive parts of a Flowsta account — the encrypted account email, a backup of the account's recovery phrase, session and activity records, privacy settings, and two-factor secrets. The repository keeps each released version of the DNA in its own directory, so an app can be pointed at a specific version rather than a moving target.

The idea is that the data is only ever readable by the person it belongs to. Values are encrypted on the user's device before they are written, using AES-256-GCM with a key derived from the user's recovery phrase, and what gets stored is the ciphertext plus the public parameters needed to open it. The practical consequence is that hosts of the cell keep and replicate records they cannot read, and the repository adds that staff cannot open user data without the user's password.

The project has since built an alternative route for the same job: current Flowsta documentation calls the Private DNA legacy and says it is being superseded by records sealed directly on the user's device in Flowsta Vault, and it advises new integrations not to depend on the DNA. Either way, a person meets it by installing Vault, whose local conductor runs the Identity, Private and Signing DNAs together. The Flowsta documentation site is the place to read further.

5 herkese açık kaynaktan derlendi; son kontrol: 23 Eylül 2026.