- creates a master seed to simplify multiple identies

- stores keys in the browser and sends it encrypted to relays ("no servers")

- apps that integrate can call the same extension api

- communicates via iframe