Crypto
Decentralized Identity
Definition
Decentralized identity is a model where people and organizations control digital identifiers and credentials using cryptography instead of a central authority.
Learn more in our guide
What are security tokens and compliance by code in crypto markets
Security tokens embed transfer and control rules so regulated constraints are enforced at mint, transfer, burn, and approval time.
What is decentralized identity?
Decentralized identity is a way to prove “who you are” (or what an entity is) online using cryptographic keys and portable credentials, rather than relying on a single company, government database, or login provider to vouch for you. In practice, it means you can hold identifiers and verifiable claims in a wallet-like app and present only the information a verifier needs (for example, “over 18” or “accredited investor”) without handing over your entire identity record. This approach is increasingly relevant to regulated crypto workflows and the broader theme of what are security tokens and compliance by code, because it can support reusable compliance checks while reducing data exposure.
Did crypto
In crypto, decentralized identity typically combines blockchain-adjacent identifiers with offchain credentials so users can authenticate, receive permissions, or satisfy compliance requirements without creating new accounts everywhere. A common pattern is: a user controls a key pair; an issuer creates a signed credential about the user; and a verifier checks that signature and any revocation status before granting access. Some systems anchor identifiers or key updates on a blockchain for tamper-evidence, while keeping personal data offchain for privacy. This is where concepts like identity attestation become practical: an exchange, bank, DAO, or KYC provider can attest to a fact, and the user can later prove it to another service. Solutions such as onchainid also illustrate how identity primitives can be integrated into token and compliance tooling.
Decentralized identifier
A decentralized identifier is a globally unique identifier—often written like a URL—that is designed to be controlled by its owner rather than issued and managed by a central registry. The identifier can be “resolved” to a DID document, which is a small piece of metadata describing how to verify control of that identifier (for example, which public keys are valid) and where to interact with the subject (for example, service endpoints). The key idea is separation: the DID is not the same thing as your personal data. Instead, it points to verification material so others can validate signatures you produce, and it supports lifecycle operations such as key rotation and deactivation. In compliance contexts, a DID can be the stable handle that links a user to proofs like on chain kyc results without publishing sensitive KYC data on a public ledger.
Why decentralized identity matters
Decentralized identity matters because it reduces dependence on centralized identity silos, lowers the blast radius of data breaches, and enables more privacy-preserving verification across apps and jurisdictions. For users, it can mean fewer repeated KYC processes and more control over what is shared; for businesses, it can mean faster onboarding and clearer auditability when credentials are issued, presented, and revoked. It also helps align incentives: issuers compete on trust and coverage, while users keep custody of their credentials rather than being locked into a single platform login. As tokenized finance grows, decentralized identity is a foundational building block for programmable compliance—another angle on what are security tokens and compliance by code—because it can connect permissions and eligibility to cryptographic proofs instead of brittle, database-only checks.
Frequently Asked Questions
How does decentralized identity work?
A user controls cryptographic keys and stores verifiable credentials in a wallet. Trusted parties issue signed credentials, and verifiers check those signatures (and revocation status) to confirm claims without needing a central login provider.
What is the difference between decentralized identity and traditional digital identity?
Traditional identity usually depends on centralized accounts and databases controlled by platforms or institutions. Decentralized identity shifts control to the user, who can present portable, cryptographically verifiable credentials across many services.
Is decentralized identity stored on a blockchain?
Not necessarily. Many designs keep personal data offchain and only anchor identifiers, key updates, or revocation references onchain to improve integrity while preserving privacy.
What is a decentralized identifier used for?
A decentralized identifier is used as a stable, owner-controlled reference that others can resolve to verification material like public keys. It enables authentication, secure messaging, and credential verification without relying on a single identity provider.
Can decentralized identity support KYC and compliance?
Yes. A provider can issue a credential proving a user passed checks, and the user can later prove that status to another service, sometimes alongside on chain kyc mechanisms, without revealing full documents each time.