Digital Identity, on your terms

A wellknown.id® is a standards-compliant digital identity that respects privacy and works everywhere. Whether you’re on the internet or the high street, you choose what to share and when to share it.

Holder / Titulaire: did:key:z6MkvoReGPHkE6zaXdHn3eH7uk7MSMk5nP8k4EYvVfdBLMvK
Issued by / Émis par: You
Authority / Autorité: None required
Password / Mot de passe: None, ever
Valid / Valide: While you hold the key

See what it can do How it works Get kivi, the wallet

One key. A patchwork of uses.

Signing in is the first patch. The same key can prove your age at a door, stand with others in a shared identity, and carry the memberships you choose to show. Pick a patch to read more.

How it works

A key, a proof, a recognition.

No accounts and no passwords: just cryptography your browser already speaks, and standards sites already use.

01 · YOUR KEY

Made on your device

The first time you use wellknown.id, your device makes a secret, and from it a separate key for each site. A key’s public half is your identifier there.

02 · A PROOF

Signed, just now

To sign in, your device signs a one-time challenge for that one site. It proves you hold the key without revealing it.

03 · RECOGNISED

Where you choose

Sites publish who they are on their own domain, so there’s no registration with anyone, and they recognise you by your key.

The full story

For developers

One file and a script tag.

List your sign-in return addresses at /.well-known/id, add the button, and receive a verified OpenID Connect ID token. Your domain is your client ID: no registration, no secrets to rotate.

Quick start Integration guide Documentation

<!-- your page -->
<wellknown-id-button></wellknown-id-button>
<script src="https://wellknown.id/sdk/web.js" defer></script>

window.addEventListener('wellknown-id-login-success', (e) => {
  const { sub, id_token } = e.detail; // sub is the user's did:key
});

Roadmap

What’s sewn in, and what’s next.

An honest account of where each piece stands.