By Diego Zavala
Yesterday we looked at how far passkeys have come and at the new frontier ahead. Today, that frontier comes into view as we announce steps to accelerate the adoption of digital credentials at scale. It’s a big day for digital credentials on the Authenticate agenda too, with sessions from Mastercard, PayPal, Microsoft and Valid8. They range from wiring identity wallets into payment authentication to why the difference between trust and identity matters.
Why digital credentials matter
Think about what it takes to start a new job, open a bank account or rent a home. You prove who you are, where you live, your right to work, your qualifications and your income, again and again. You do it with photocopies, uploads and manual checks, and you share far more than anyone needs. It’s slow for people, costly for organizations and an open door for fraudsters, especially as deepfakes and fake remote job candidates become more common.
Digital credentials change that. Each fact carries built-in proof of the source that issued it so it can be verified in seconds, and you share only what’s needed. Until now, though, digital identity has only worked in pockets. National schemes and state-by-state mobile driver’s licences rarely work across borders, or with each other. But the industry is now coming together to make it work.
Built on verified human identity
Digital credentials lets us build a foundation of trust based on verified human identity. A person is verified once, and that identity becomes a cryptographic root of trust. Creating an account, approving an action and proving a fact about yourself, such as your age or your right to work, can all link back to it. That closes the phishable gaps that remain today at account sign-up and recovery, and opens up significant new opportunities.
The opportunity
Get this right and the impact is enormous:
- For people, it starts with everyday uses like age verification, then travel and payments. Access to vital services becomes simpler, and every time you share information about yourself, you do it in a privacy-preserving way.
- For enterprises, it means going fully passwordless, securing sign-up and account recovery, and hiring and onboarding remote workers with confidence. Being able to reliably verify that every identity is genuine, at onboarding and throughout its lifecycle, would be a disruptive shift in enterprise cyber and fraud risk.
- For the agentic economy, it is the critical prerequisite. Every transaction an AI agent makes can be rooted in a real person’s approval.
- For innovation, shared building blocks free companies to focus on what makes them different. That will open up use cases nobody has thought of yet.
What FIDO is doing
To make this ecosystem work at global scale, we’re applying the playbook that took passkeys from concept to billions of users, with four focused pillars in our Digital Credentials program:
- Wallet Certification: Establishing a common security, privacy, and interoperability baseline (plus vertical profiles for high-assurance needs like government IDs and payments) so issuers, holders, and verifiers can trust wallets across borders and ecosystems.
- Scalable Verifier Identification: Defining a scalable framework for verifier authentication, ensuring a user’s wallet can cryptographically verify that a website or service requesting sensitive attributes is legitimate before sharing data.Interoperable
- Credential Schemes & Specifications: Defining credential schemes as well as protocols supporting credential presentation and issuance, complementing existing ones.
- Usability & Verifier Enablement: Delivering the UX guidelines, implementation tools, and shared best practices that make it easy for verifiers to accept digital credentials and intuitive for people to use them.
Driving all of this is our highly committed community. That community is gathered here today at Authenticate, and the sessions and hallway conversations they spark will help drive this important work forward.
Can’t be in Carlsbad? Catch up on today’s coverage on AuthenticateCon.
