User's private key was secured by a key management service. client authenticate through SPAKE2 zero-knowledge proofs and key management service. The key management service also uses strong encryption to protect the data. This design is to guarantee that only users can access their private key, providing a cost convenience experience.