IntentGuard Docs

Two-factor authentication for every Solana transaction. Commit from your phone, verify on-chain.

What is IntentGuard?

IntentGuard is a commit-reveal 2FA protocol for Solana. It separates transaction intent from execution across two devices, so a compromised browser can never change your transaction parameters.

How It Works

1. Commit — User confirms intent on their mobile app. The intent hash (SHA-256 of action + params) is committed on-chain via commit_intent.
2. Verify — The dApp prepends a verify_intent instruction to the actual transaction. The program checks that the hash matches the committed intent.
3. Execute or Revert — If hashes match, the TX proceeds atomically. If they don't match (attacker changed params), the TX reverts and funds are safe.

Install

TypeScript

npm install intentguard-sdk

Rust (CPI)

cargo add intentguard-cpi

Quick Example

import {
  computeIntentHash,
  createCommitIntentInstruction,
  createVerifyIntentInstruction,
} from 'intentguard-sdk';

// 1. Compute hash of what the user intends
const hash = computeIntentHash('swap', { amount: 1_000_000_000, mint: '...' });

// 2. Commit on-chain (from mobile app)
const commitIx = createCommitIntentInstruction(user, appId, hash, 300);

// 3. Verify + execute atomically (from browser)
const verifyIx = createVerifyIntentInstruction(user, appId, hash);
const tx = new Transaction().add(verifyIx).add(swapIx);

Key Concepts

Architecture