PeerAuth Extension

PeerAuth is the browser extension Peer web uses to verify payments. It is listed in the Chrome Web Store as Peer: Verify Payments Securely. The Peer mobile app verifies payments in-app and does not need it.

What it does

When a page asks it to verify a payment, PeerAuth:

1. Opens the payment provider in a new tab, where you sign in and, if asked, select the payment.
2. Captures only the requests that the provider template for that platform and action matches, and extracts the fields needed for verification.
3. Encrypts the sensitive session material to the Attestation Service enclave after verifying the enclave's attestation. See Buyer TEE Verification.
4. Returns the encrypted session and the payment details to the page, then closes the capture session.

It also creates encrypted credential bundles for Seller Autopilot without returning plaintext credentials to the page.

Privacy

• PeerAuth has no wallet, proof history or account store. Capture sessions live in memory and are cleared when the capture ends; captured requests and payment data are never saved.
• It does not collect browsing history. Provider templates limit capture to the selected verification flow.
• Pages on peer.xyz and zkp2p.xyz connect automatically. Any other site must be approved in an extension popup, and you can revoke a site's access from the extension's settings.

For integrators

PeerAuth exposes the window.peer interface to approved pages. To build your own capture extension instead, see Build your own extension.