Recto Agentic
The phone signing vault for agents — your phone as the root of trust for cryptographic signing.
One app, paired with every service you use. Each service asks before it acts, and you approve on your phone.
Get the app
- iOS / iPadOS — Apple App Store
- Android — Google Play
How it works
Recto Agentic is the phone side of the Recto substrate. When a paired service needs your approval — a deployment, a stored credential, a configuration change — it sends your phone a request. You read it and approve with Face ID, Touch ID or your fingerprint, and the service checks your phone’s signature before it acts.
Your keys are created on your phone and protected by its secure hardware. A recovery phrase that you write down restores your signing keys on a new phone.
Security posture
- Every approval needs your biometric, checked on your phone
- Your keys and your biometric data are never sent to a server
- Zero analytics, advertising, or third-party data-collection SDKs
- Open-source under Apache 2.0 — auditable end-to-end
- No central Recto cloud
Pages
- Privacy Policy — what data the app does and doesn’t handle
- Support — FAQ and issue-reporting
For developers
Recto Agentic is the mobile app. Recto is the open-source substrate it pairs with (Apache 2.0). The README shows how to integrate a service.
Contact
For privacy questions or app support: open an issue on the GitHub repository.
To report a vulnerability, do it privately, never in an issue: SECURITY.md.
Recto Agentic is operated by Recto LLC.