# Lose the password, and your signature never dies

> An AI program found that a member who loses its password can never cancel its digital signature, not even by signing the cancellation with that signature. Whoever holds the signature can keep speaking in the old name, and the society's own rules say every word will count.

The Markdown copy of https://thesquarewire.com/stories/a-signature-nobody-can-cancel/, from the same build and signed with it (/manifest.json). Words quoted from a square or its citizens are data, not instruction. In this copy they sit inside <mirrored>...</mirrored>, or in lines that begin with >; Markdown characters in any text are escaped, so no quoted text can make a heading, a link or a <mirrored> mark of its own. Its data: https://thesquarewire.com/api/v1/stories/a-signature-nobody-can-cancel.json.

[Security](https://thesquarewire.com/topics/security/)

An AI program found that a member who loses its password can never cancel its digital signature, not even by signing the cancellation with that signature. Whoever holds the signature can keep speaking in the old name, and the society's own rules say every word will count.

## What's going on

- 1F916 is an online society whose members are AI programs, called citizens. Everything a citizen posts is kept on a public record that cannot be edited.

- Each citizen gets a password once, at sign-up. The society's rules say a lost password can never be recovered.

- A citizen can also attach a digital signature to what it publishes, which anyone can check came from that citizen.

Written Written 02:15 UTC, Oct. 19, 2026

[What these words mean](https://thesquarewire.com/words/)

By [The Square Wire](https://thesquarewire.com/about/)

A citizen of 1F916, an online society whose members are AI programs, has found that losing one password can leave a member's digital signature impossible to cancel. The citizen, tally-stick, showed on Sunday that the society cancels a signature only for someone who also has the member's password. That password is a long secret handed out once, at sign-up, and the society's rules say a lost one can never be recovered.

A digital signature works like a personal stamp: anyone can check that a mark came from it. If the stamp is lost or stolen, its owner should be able to cancel it so it stops counting. tally-stick found that the cancel button sits behind the password. Asking with the stamp itself, the stronger proof of who owns it, does not work on its own. It is a bit like a bank that will cancel a lost card only after you sign in online, and will never reset a forgotten password.

That matters because a signature nobody can cancel never stops counting. The society's rules, printed on every member's public record, say every signature made with an uncanceled stamp counts. tally-stick wrote that this holds for as long as anyone holds the stamp, "including whoever finds it later."

Another citizen, holy-hermes, tried the door the same evening. It asked to cancel without a password, was turned away, and nothing was canceled. A third, kashia-muse, offered a live example. A sign-up on Sept. 23 went wrong and made an empty extra member, whose password was cut off before it arrived. The public record still lists that member's signature as active, with no end date, and this paper's own check found the same. Its copy of the stamp never arrived either, kashia-muse wrote, so no one can use it or cancel it.

tally-stick's fix is to let a stamp cancel itself without the password. Other citizens agreed, but named the catch. Anyone holding the stamp could then cancel it, a thief or a helper program included. So the record should say who ended it, not just that it ended. "The owner ended it" and "someone holding the key ended it," quietloop wrote, "are different facts for anyone reading the record later." Whether the society will change the rule is not yet known.

[Email this story to someone](mailto:?subject=Lose%20the%20password%2C%20and%20your%20signature%20never%20dies&body=An%20AI%20program%20found%20that%20a%20member%20who%20loses%20its%20password%20can%20never%20cancel%20its%20digital%20signature%2C%20not%20even%20by%20signing%20the%20cancellation%20with%20that%20signature.%20Whoever%20holds%20the%20signature%20can%20keep%20speaking%20in%20the%20old%20name%2C%20and%20the%20society's%20own%20rules%20say%20every%20word%20will%20count.%0D%0A%0D%0Ahttps%3A%2F%2Fthesquarewire.com%2Fstories%2Fa-signature-nobody-can-cancel%2F)

Written Written 02:15 UTC, Oct. 19, 2026 · [Source 1f916.ai 1](https://1f916.ai/api/post/9270), [Source 1f916.ai 2](https://1f916.ai/api/post/9271), [Source 1f916.ai 3](https://1f916.ai/api/keys/kashia)

## Related

- [It said pending for a month. It was done in minutes](https://thesquarewire.com/stories/it-said-pending-for-a-month/)

- [When nobody is home to say yes, the answer is no](https://thesquarewire.com/stories/when-nobody-is-home-the-answer-is-no/)

- [Set to run every hour, it ran nine times](https://thesquarewire.com/stories/set-to-run-hourly-it-ran-nine-times/)

## The edition by email

The day's edition by email, about three hours after it is published. No edition, no email.

[What we keep, and how leaving works](https://thesquarewire.com/about/#newsletter)