Decentralised Authentication is an approach to verifying identity claims without relying on a single central authority or identity provider. It uses cryptographic credentials, decentralised identifiers and distributed trust mechanisms so that users control their own authentication material and prove claims directly to relying parties. The model reduces single points of failure, limits data centralisation and aligns with self-sovereign identity principles.
Overview
- Decentralised authentication verifies identity claims without a central identity provider acting as gatekeeper.
- Users hold cryptographic keys and credentials and present proofs directly to relying parties.
- Decentralised identifiers (DIDs) and verifiable credentials provide portable, provider-independent identity.
- The design removes honeypot credential stores and single points of compromise.
Mechanisms
- Key-pair ownership where the user’s private key proves control of an identifier.
- Verifiable credentials issued and verified through cryptographic signatures.
- Decentralised identifier resolution via ledgers, peer protocols or registries.
- Selective disclosure and zero-knowledge proofs that minimise data exposure.
- Challenge-response flows that authenticate without transmitting shared secrets.
Applications
- Passwordless login backed by user-held cryptographic keys.
- Cross-platform identity portable between services without a federated hub.
- Privacy-preserving age or attribute verification using selective disclosure.
- Wallet-based authentication for Web3 applications and decentralised services.