Decentralized identifier

decentralized identifier
Websitewww.w3.org/groups/wg/did

A decentralized identifier (DID) is a type of globally unique identifier that enables an entity to be identified in a manner that is verifiable, persistent (as long as the DID controller desires), and does not require the use of a centralized registry.[1] DIDs enable a new model of decentralized digital identity that is often referred to as a self-sovereign identity (SSI).[2] This emerging model of digital identity, based on DIDs and SSIs, puts users in full control of their identity data and addresses key limitations of centralized and federated identity providers, including security vulnerabilities, large-scale data breaches, limited privacy protections, and insufficient user control.[3] The DIDs are an important component of decentralized web applications. A decentralized identity management system based on Decentralized Identifiers and Self-Sovereign Identity principles, usually starts from a reference architecture involving Issuers, Holders, and Verifiers, with digital wallets or agents acting on behalf of identity subjects, and a specific identity infrastructure that supports issuance, validation and revocation of credentials.[3]

DID documents

A decentralized identifier resolves (points) to a DID document, a set of data describing the DID subject, including mechanisms, such as cryptographic public keys, that the DID subject or a DID delegate can use to authenticate itself and prove its association with the DID.[1]

DID methods

Just as there are many different types of URIs, all of which conform to the URI standard, there are many different types of DID methods, all of which must conform to the DID standard.[1] Each DID method specification must define:

  • The name of the DID method (which must appear between the first and second colon, e.g., did:example:).
  • The structure of the unique identifier that must follow the second colon.
  • The technical specifications for how a DID resolver can apply the CRUD operations to create, read, update, and deactivate a DID document using that method.

The W3C DID Working Group maintains a registry of DID methods.[4]

Usage of DIDs

A DID identifies any subject (e.g., a person, organization, thing, data model, abstract entity, etc.) that the controller of the DID decides that it identifies. DIDs are designed to enable the controller of a DID to prove control over it and to be implemented independently of any centralized registry, identity provider, or certificate authority. DIDs are URIs that associate a DID subject with a DID document.[5] Each DID document can express cryptographic material, verification methods, and service endpoints to enable trusted interactions associated with the DID subject. A DID document might contain additional semantics about the subject that it identifies. A DID document might also contain the DID subject itself (e.g. a data model).[6][1]

National efforts include the European Digital Identity (EUDI) Wallet as a part of eIDAS 2.0 in the European Union,[7] and China Real-Name Decentralized Identifier System (China RealDID) under China's Ministry of Public Security.[8] The AT Protocol and applications powered by the protocol such as Bluesky use DIDs for their identity system in order to give users full control over their identity, including where their data is stored. The protocol uses its own DID method, did:plc, as well as a general domain-based method with did:web.[9]

Persona is an identity verification company founded in 2018. Its product consists of uploading a government-issued ID and potentially taking a selfie to confirm the user's identity and give them a DID identity.[10] The service is used by the LinkedIn professional networking site,[11] the Discord and Reddit social media networks,[12][13][14] the Roblox video game platform,[15] and the OpenAI artificial intelligence company.[16]

Polygon ID is a privacy-focused digital identity solution developed by Polygon, a blockchain scaling platform. It leverages zero-knowledge proofs (ZKPs) to allow users to verify specific aspects of their identity—such as age or residency—without revealing underlying personal data. This enables secure and private interactions with services that require identity verification, such as financial platforms, voting systems, or DAO governance, while preserving user anonymity. Polygon ID is already being explored by governments and organizations seeking compliant and privacy-preserving identity systems in Web3 environments.[17]

Standardization efforts

The W3C DID Working Group[18] developed a specification for decentralized identifiers to standardize the core architecture, data model, and representation of DIDs.

The W3C approved the DID 1.0 specification as a W3C Recommendation on July 19, 2022.[1]

The Decentralized Identity Foundation (DIF) published a Dynamic Traveler Profile Generation Specification in June 2023, for use cases in the travel industry. [19]

See also

References

  1. ^ a b c d e "Decentralized Identifiers (DIDs) v1.0". World Wide Web Consortium. Retrieved 2021-06-01.
  2. ^ "Decentralized Identifiers (DIDs) v1.0" (PDF). European Commission. Retrieved 2021-06-01.
  3. ^ a b Butincu, Cristian Nicolae; Alexandrescu, Adrian (2024). "Design Aspects of Decentralized Identifiers and Self-Sovereign Identity Systems". IEEE Access. 12: 60928–60942. doi:10.1109/ACCESS.2024.3394537. ISSN 2169-3536. S2CID 269461609.
  4. ^ "W3C DID Spec Registries". World Wide Web Consortium.
  5. ^ "Decentralized Identifiers: Everything you need to know about the next-gen web ID tech". The Daily Swig | Cybersecurity news and views. 2022-07-08. Retrieved 2023-08-25.
  6. ^ "A Primer for Decentralized Identifiers - An introduction to self-administered identifiers for curious people". w3c.github.io. Retrieved 2020-05-26.
  7. ^ "SSI advocates welcome EU digital wallet, IOTA sees opportunity | Biometric Update". www.biometricupdate.com. 2024-03-08. Retrieved 2024-03-27.
  8. ^ "China's project to verify real-name digital ID leans into national blockchain ambitions | Biometric Update". www.biometricupdate.com. 2023-12-13. Retrieved 2024-03-27.
  9. ^ "Resolving Identities | Bluesky". docs.bsky.app. Retrieved 2025-05-08.
  10. ^ "Dashboard - Persona". app.withpersona.com. Retrieved 2025-05-08.
  11. ^ "Identity verification via Persona". LinkedIn Help. Retrieved 2025-05-08.
  12. ^ Carpenter, Lincoln (February 13, 2026). "Oh, good: Discord's age verification rollout has ties to Palantir co-founder and panopticon architect Peter Thiel". PC Gamer. Retrieved February 15, 2026.
  13. ^ "Reddit introduces age verification in the UK ahead of new rules". BBC News. 14 July 2025. Retrieved 24 July 2025.
  14. ^ McConvey, Joel R. (15 July 2025). "Reddit deploys selfie and document age verification from Persona". Biometric Update. Retrieved 15 July 2025.
  15. ^ Malik, Aisha (2026-01-07). "Roblox now requires all users globally to complete age checks to access chat". TechCrunch. Retrieved 2026-01-13.
  16. ^ Capoot, Ashley (January 20, 2026). "OpenAI is rolling out age prediction for ChatGPT consumer plans". CNBC. Retrieved February 15, 2026.
  17. ^ Bharath Babu, S.; Jothi, K. R. (2025). "A Secure Framework for Privacy-Preserving Analytics in Healthcare Records Using Zero-Knowledge Proofs and Blockchain in Multi-Tenant Cloud Environments". IEEE Access. 13: 8439–8455. doi:10.1109/access.2024.3509457. ISSN 2169-3536.
  18. ^ "W3C DID Working Group". World Wide Web Consortium. Retrieved 2024-12-11.
  19. ^ "SIG Hospitality and Travel". identity.foundation. Retrieved 2024-01-09.