kivi, the wellknown.id wallet.

What it does

Your documents, checked, and kept by you.

• Point, then tap. Point your phone's camera at the photo page of a passport or the back of an ID card, then hold the phone against it. kivi reads the chip and checks that the issuing country signed its data and that the chip is genuine, not a copy.
• Prove, don't reveal. When a site asks whether you're over 18, kivi can answer just that: not your name, not your date of birth. You approve every answer, and only the site that asked can use it.
• Witnessed, if you want. wellknown.id can check your document's chip itself and vouch for it, so sites can trust the answer more. It keeps nothing, and kivi shows you its privacy notice first.
• Your laptop and your phone, together. Bond kivi in your browser with kivi on your phone, and your browser can ask your phone for proof, over an end-to-end encrypted channel. Your documents never leave the phone.
• Yours alone. Your wellknown.id is a secret made on your device, kept behind the phone's own lock, in secure hardware where the phone has it, and out of the phone's backups. Have several if you like, called personas: a site sees each as a different account. There's no account, no password, and nothing about you on our servers that we can read.

Get kivi

Where it runs today.

• On the web: kivi.wellknown.id works in any modern browser and installs as an app. Browsers can't talk to document chips, so reading a document needs the phone app.
• Android: not in Google Play yet. The nightly below is for testers.
• iPhone: in testing, not in the App Store yet. It reads passports and ID cards, and keeps your wellknown.id passkey.

kivi is in development, like the rest of wellknown.id. This page says what works now, and nothing more.

Android nightly · bleeding edge

For testers: the latest build.

Built from the newest code, for Android phones from the last several years (64-bit ARM). It can break, and Google Play hasn’t reviewed it. Once kivi is in the stores, install it from there instead.

Built

Size

SHA-256

Signed by

• Installing: open the downloaded file. Android will ask you to allow installs from your browser, once.
• Had an earlier test build? Uninstall it first: this one is signed with kivi’s own key, so Android won’t update over it. That removes the documents kivi held; read them again afterwards.
• Checking it’s ours: the certificate fingerprint above is kivi’s signing key. apksigner verify --print-certs kivi-nightly.apk shows the one your file was signed with.