NullLink
Your identity. Your control.
New here?
Have an invitation code? Create your NullLink ID.
Your identity. Your control.
Have an invitation code? Create your NullLink ID.
Choose a strong passphrase to encrypt your identity. This passphrase never leaves your browser.
Enter your NullLink ID (or @alias) and passphrase to unlock your vault.
Upload your encrypted backup file and enter the passphrase used when it was created.
Use this ID to log in anywhere that accepts NullLink.
Faster ways to log in — no need to type your full NL-ID.
Passkey (Biometric Login)
Add New Credential
Applications and agents you've shared credentials with. You can revoke access at any time.
Loading…
Two-factor authentication (TOTP) — add an authenticator app for extra security.
Loading...
Every credential share is logged here. Only you can read these entries.
No sharing activity yet.
A desktop browser wants to log in with your NullLink ID.
Signing proves that you control this key. It does not prove who you are.
Use fingerprint or Face ID — no typing needed
Or approve with alias + passphrase:
Enter your admin key to manage the Identity Vault.
Control whether new NL-IDs require an invitation code.
Create codes for new users to register their NL-ID.
Loading...
Loading...
Control which websites can call the vault from the visitor's browser (CORS). This list does not apply to apps that sign users in from their own backend (they use an app key, see below).
Loading...
Loading...
Manually Add Origin
Backends that use "Sign in with NullLink ID" (sea, veytrix, fraym, ...) identify themselves with an app key sent as the X-App-Key header. The origin list above only controls browsers (CORS); a backend never needs it. Revoking an app here really blocks it.
Loading...
Register an app
We do not check who the app owner is, we make them responsible: they state who they are, why they sign users in, and accept the app-owner terms (draft, version ...).
NullLink is aligning with the Swiss Trust Infrastructure (swiyu) to participate in the Swiss e-ID ecosystem. The verification flow has been tested end to end in the Swiss sandbox. Production is not live yet.
Discovery endpoints: /.well-known/did.json · /.well-known/nlid-configuration · /.well-known/openid-credential-issuer
Track progress on NullLink features and integrations.
Ed25519 signing, X25519 key exchange, XSalsa20-Poly1305 encryption, PBKDF2-SHA512 key derivation. All crypto client-side.
Biometric login, QR cross-device login, alias system. Multiple authentication methods.
User-controlled consent screen with per-credential selection. Only approved apps can request. Trust markers displayed.
NL-IDs published as W3C Decentralized Identifiers. Each user has a did:web document for interoperability.
Standardized credential schemas with URN identifiers, expiration dates, and version tracking.
Dynamic origin management with trust levels (Core / Verified / Unknown). Apps see verified badges.
Consent-based credential sharing for any website. Integration guide available.
Issue credentials in IETF SD-JWT VC format for per-field selective disclosure and cryptographic verifiability.
OpenID for Verifiable Presentations is working in the Swiss sandbox. Credential issuance (OID4VCI) is planned.
Link a credential from the swiyu wallet to your NL-ID, tested end to end in the sandbox. Next: production onboarding and a trusted-verifier listing. Learn more.
Native app with hardware secure element binding, push-based login approvals, and offline vault access.
Last revised: October 25, 2026
This Privacy Policy describes how NullLink, operated by Myrax Core GmbH ("Company", "we", "us", "our"), collects, uses, and protects your information when you use the service at nulllink.ch (the "Service"). NullLink is a zero-knowledge identity vault — our architecture is designed so that we cannot access the data in your vault. There is one optional exception: if you choose to link a Swiss e-ID, our server briefly sees the attributes you approve while the link is made, then hands them to your browser to be encrypted into your vault. This is explained in section 1a.
NullLink employs a zero-knowledge architecture. This means:
NullLink can link a credential from the Swiss e-ID wallet (swiyu) to your NL-ID, so that apps can see that NullLink has verified it. This is optional, off unless you start it, and currently runs in the Swiss sandbox (test) environment: please use test data only. Linking requires our server to see data for a moment, which is different from the rest of the service:
The Swiss infrastructure is used for public registry lookups (for example trust and issuer information). Those lookups do not contain your attribute values.
When you visit nulllink.ch, our server may process:
We do not use advertising networks or tracking services. Apart from the location lookup above, no third-party analytics are used.
NullLink uses industry-standard cryptographic algorithms:
The limited information we have access to is used solely to:
When you share credentials with a third-party application or PeerDesk agent:
Once credentials are shared with a third party, that party becomes the data controller for the shared data. NullLink is not responsible for how third parties handle data you choose to share.
Your encrypted vault data, and any Swiss e-ID link reference, is retained as long as your account exists, or until you unlink the Swiss e-ID. You may delete your account and all associated data at any time from within the NullLink interface. Deletion is permanent and irreversible — we have no way to recover deleted data.
Under GDPR and Swiss data protection law, you have the right to:
Because we cannot read your vault, we hold very little personal data. For the optional Swiss e-ID link we request only the attributes you select.
NullLink does not integrate with third-party analytics, advertising, or tracking services. The only external resources loaded are:
If you link a Swiss e-ID, the Swiss federal swiyu infrastructure (wallet, trust and issuer registries) is involved. Its use is governed by the Swiss Confederation's terms. Your wallet sends the attribute values to our verification service, not to us through a third party.
NullLink is not intended for use by individuals under the age of 16. We do not knowingly collect or store data from children.
As your vault data is encrypted and unreadable to us, international data transfer concerns are inherently mitigated. Our servers are located in Europe, and we do not transfer data to jurisdictions outside the EEA/Switzerland. The same applies to the Swiss e-ID link: the values are encrypted in your vault, and we keep only the reference described in section 1a.
We may update this Privacy Policy from time to time. Material changes will be communicated via the Service. Continued use constitutes acceptance of the revised policy.
For privacy-related questions or to exercise your data rights:
Myrax Core GmbH
Email: nulllink@myraxcore.com
Website: nulllink.ch
Last revised: October 25, 2026
Welcome to the Terms of Use (these "Terms") for NullLink, a zero-knowledge identity vault operated by Myrax Core GmbH ("Company", "we", "us", "our"), accessible at nulllink.ch and its subdomains (the "Service"). By accessing and/or using the Service, you are agreeing to these Terms. If you do not understand or agree to these Terms, please do not use the Service.
You must be 16 years of age or older to use NullLink. By using the Service, you represent and warrant that you meet this requirement.
NullLink is a zero-knowledge identity vault. All encryption, decryption, and key derivation happens exclusively in your browser. Your passphrase never leaves your device. We store your vault as encrypted blobs — we cannot read, access, or recover it.
Exception: if you choose to link a Swiss e-ID, our server sees the attributes you approve once, while the link is made, and then hands them to your browser to be encrypted into your vault. See the Privacy Policy, section 1a.
Your NL-ID is a unique, cryptographically derived identifier. It is generated locally in your browser from your passphrase. NullLink does not assign, manage, or have the ability to reset NL-IDs.
NullLink supports multiple authentication methods:
When a third-party application or PeerDesk agent requests your credentials:
NullLink is not responsible for how third-party applications handle data you choose to share with them.
You agree not to:
The NullLink name, logo, and Service are owned by Myrax Core GmbH. The cryptographic protocols, user interface, and documentation are protected by applicable intellectual property laws. You may not copy, modify, distribute, or create derivative works of the Service without our written consent.
We strive to maintain reliable uptime but do not guarantee uninterrupted access. We reserve the right to modify, suspend, or discontinue the Service at any time with reasonable notice. Your encrypted data will always remain exportable.
The Service is provided "as is" and "as available" without warranties of any kind, either express or implied. We do not warrant that the Service will be uninterrupted, error-free, or free of harmful components.
To the maximum extent permitted by Swiss law, Myrax Core GmbH shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service, including but not limited to loss of data, loss of profits, or loss of access to your identity vault due to a lost passphrase.
You may delete your vault and all associated data at any time from within the NullLink interface. Since we cannot read your vault, deletion is permanent and irreversible. Unlinking a Swiss e-ID removes its stored values from your vault record.
These Terms are governed by and construed in accordance with the laws of Switzerland. Any disputes shall be subject to the exclusive jurisdiction of the courts of the Canton of Zurich, Switzerland.
We may update these Terms from time to time. We will notify registered users of material changes via the Service. Continued use constitutes acceptance of the revised Terms.
For questions about these Terms, contact us at:
Myrax Core GmbH
Email: nulllink@myraxcore.com
Website: nulllink.ch
NullLink (NL-ID) is a zero-knowledge identity system. You create a cryptographic identity backed by Ed25519 keys. Your private key is encrypted with your passphrase in your browser — the server only stores an encrypted blob it cannot read.
Unlike traditional login providers, NullLink does not see the credentials in your vault. You control what to share, with whom, and when.
One optional exception: if you link a Swiss e-ID, NullLink sees the attributes you approve once, while the link is made. They are then encrypted into your vault like your other credentials. This is shown on the card before you start.
NLI-XXXXXXXXXXXX).Your identity cannot be recovered. The server never sees your passphrase — all decryption happens in your browser. This is the trade-off for zero-knowledge security.
Recommendation: Save your passphrase in a password manager and export an encrypted backup file.
When a website or entity requests your credentials:
Linking is optional and currently runs in the Swiss sandbox, so use test data only.
NullLink asks your swiyu wallet only for the attributes you tick. You approve them again in the wallet. Our server then briefly sees them and checks them. It does not keep them: it hands them to your browser, which encrypts them into your vault like your other credentials. The server keeps only a reference (issuer, type, dates and a keyed hash of the credential number). You see the values after unlocking your vault. Unlinking removes them.
The rest of your vault stays encrypted and unreadable to us.
Yes. The server only stores encrypted blobs. Without your passphrase, the data is useless. All encryption uses industry-standard algorithms: Ed25519 for signing, X25519 for key exchange, XSalsa20-Poly1305 for encryption, and PBKDF2-SHA512 with 100,000 rounds for key derivation.
If you registered a passkey on the old domain ids.nulllink.ch, it won't work on nulllink.ch because WebAuthn passkeys are bound to the domain they were created on.
Solution: Log in with your NL-ID + passphrase on nulllink.ch, then register a new passkey. Your old passkey on the previous domain can be removed from your device settings.
Full texts: Privacy Policy · Terms of Use