Pools and passkeys
Pools
A pool is an off-chain grouping of receivables that share one passkey. Pools are not recorded on the blockchain.
A pool is sold as a single block to one funder, so custody is uniform across it: every receivable in a pool is either in custody or held by the same funder.
A pool has a code (3 to 41 characters: letters, digits and - _ / .),
a free-text name, and a passkey.
Passkeys
The passkey controls who can look up the receivables in a pool. Anyone holding a Loan ID and its pool passkey can verify that receivable.
A passkey is required and can be up to 64 characters. There is no minimum length or character requirement.
Use a long passkey. Loan IDs are typically sequential and easy to predict, so the passkey determines who can look up your receivables. A passphrase is significantly stronger than a four-digit code. The verification endpoint is rate-limited per IP address, which limits brute-force attempts but does not replace a strong passkey.
Passkeys cannot be changed
The on-chain identifier is the hash of the Loan ID and the passkey. Changing the passkey would change the identifier of every certificate registered in the pool, orphaning them.
A passkey therefore cannot be changed once receivables are registered in the pool. Because Loan IDs are permanent, the same receivables cannot be registered again under a new passkey.
- Record the passkey securely. Your pool's passkey can be revealed from the pool page. The Reveal button re-masks it after approximately 30 seconds.
- Treat a disclosed passkey as a security incident and report it to STOKR.
Access to passkeys
A passkey can be read only by:
- The originator that owns the pool.
- A funder whose vault holds at least one receivable in the pool. This access ends when the funder sells the pool.
No other participant or screen can access it. Passkeys are stored server-side and are not included in pages by default. The value is retrieved only when Reveal is selected.
A passkey also appears in the loan tape export offered after registration, because it is entered in the download dialog at that point. This file allows a funder to verify a whole pool without manual entry, so send it only to the intended funder.
Scope of a passkey
A passkey controls only who can look up a pool's receivables. It confers no claim on the loans and no ability to transfer, sell or modify any record. Protect it as you would a password, because it prevents your pool from being viewed by parties you have not shared it with.