Tap Passport

• 

  Tap Passport — A physical key for your AI identity. Tap to authorize, limit access, and stay in control.

Inspiration

AI assistants are everywhere now — in our files, our homes, our cars — but the way we authorize them is stuck in 2010: passwords, OAuth popups, and permissions that never expire. We wanted an identity model that felt as physical and intentional as tapping a card at a register. If you wouldn't hand a stranger your house key forever, why do we hand AI systems standing access forever?

What it does

Tap Passport is a physical NFC fob that acts as a portable, revocable identity for AI systems. Tap it near any NFC-enabled reader and:

• Your identity is verified instantly via a signed credential (no password typed anywhere)
• You choose exactly what that AI can do — read files, edit files, use your voice — before it starts
• Access auto-expires on a timer, or you can revoke it instantly with a long press
• Every tap is logged, so you always know who accessed what, and when

How we built it

The prototype is a React + Vite frontend simulating the companion app experience: the physical fob mockup, a tap-authorization flow, a permissions screen with accessible toggle switches, a live countdown timer, and an activity log. We designed around the same trust model as tap-to-pay cards (ISO 14443 passive NFC) since it's a proven, well-understood standard — nothing new to invent on the hardware side, just a new application of it.

Challenges we ran into

Balancing simplicity with control was the hardest part — too many toggles and permissions and the "just tap it" magic disappears. We also spent real time on accessibility: screen-reader status updates for the countdown/revocation state, keyboard-operable switches, and reduced-motion support, since an identity tool has to work for everyone.

Accomplishments that we're proud of

Created a simple and secure way to prove identity to an AI by tapping an NFC device. Designed the idea to be easy for elderly and non-technical users. Built mockups for the Tap Passport device and mobile app screens. Added temporary task-only access so the AI can use only the permissions allowed by the user. Included an instant revoke option to improve safety and user control.

What we learned

Physical, tangible metaphors (a fob, a tap, a stamp of authorization) make abstract concepts like "AI permission scopes" instantly understandable in a way that a settings page never could.

What's next for Tap Passport

Build a working prototype pairing a real NFC fob with a single AI touchpoint (like a workplace file assistant), test the tap-to-authorize flow with real users, then expand to more devices once the core flow is proven safe and reliable.

Built With

• access-control
• ai-security
• authentication
• cybersecurity
• identity-management
• mobile-app
• nfc
• ui-ux