Digital identity is a set of electronically captured and stored attributes and credentials that uniquely identify a person or organization and let them prove who they are in online and offline transactions. It can be issued by a government, as with national electronic ID cards and numbers, or by private providers such as banks and technology companies, and it is used to open accounts, sign documents, receive benefits and access services.
Digital identity is the credential itself; identity verification is the process of checking that a person really matches it, and authentication is the repeated check each time they log in. A foundational ID is a general-purpose identity, such as a national ID number, while a functional ID serves one purpose, such as a voter card or a tax number. Standards and rules are set nationally, with international guidance from bodies such as the World Bank and the Financial Action Task Force.
Digital identity in plain terms
A paper passport works because a trusted office checked who you are once and then gave you a document that others accept without starting again. A digital identity does the same job for a world of apps and websites. Instead of a booklet, it might be a number linked to your fingerprints, a chip in a card, or a secure app on your phone.
When you open a bank account online, the bank asks the identity system to confirm that you are the person you claim to be, much as a shop assistant glances at the photo on a card. The difference is that the check happens in seconds, from anywhere, and can share only the details that are needed, such as your age, rather than everything on the card.
How digital identity systems work
- Registration. A person's details are captured and checked against existing records, often with biometric data such as fingerprints, iris scans or a face image to stop the same person enrolling twice.
- Issuance. The system issues a credential: a unique number, a smart card, a certificate or a digital wallet holding signed attributes.
- Authentication. Each later use is confirmed with something the person has, knows or is, often combined in multi-factor authentication.
- Federation and sharing. One trusted identity can be accepted by many services through federated identity management, and qualified digital signatures can give electronic documents legal weight.
Frameworks usually grade systems by levels of assurance. In the United States, the National Institute of Standards and Technology publishes digital identity guidelines (SP 800-63) that separate identity proofing, authentication and federation assurance levels; the European Union uses low, substantial and high levels under its eIDAS rules.
Major systems and frameworks
India's Aadhaar, run by the Unique Identification Authority of India, issued its first numbers in 2010 and has since enrolled more than 1.3 billion people using biometrics. It underpins electronic know-your-customer checks and, alongside the Unified Payments Interface, India's wider digital public infrastructure. Estonia has issued chip-based national ID cards with digital signature functions since 2002.
In the European Union, the eIDAS Regulation of 2014 made national electronic IDs mutually recognized across member states. Its revision, Regulation (EU) 2024/1183, entered into force on 20 May 2024 and requires every member state to offer citizens a European Digital Identity Wallet by the end of 2026. Use of the wallet is voluntary for citizens, and the regulation sets later dates by which banks and other regulated firms must accept it. Personal data processed in these systems remains subject to the General Data Protection Regulation.
Role in finance and inclusion
Banks, payment firms and crypto platforms must identify customers under know your customer rules, so a trusted digital identity shortens onboarding and lowers its cost. The Financial Action Task Force published guidance in March 2020 explaining how reliable, independent digital ID systems can be used for customer due diligence under its standards.
Lack of identification is a major barrier to financial inclusion. The World Bank's Identification for Development (ID4D) initiative estimated that just under 850 million people had no official proof of identity in 2021, with the largest share in Sub-Saharan Africa, and later data show the total falling. People without ID are often also those in informal employment, who cannot easily open accounts, register a business or receive transfers. United Nations Sustainable Development Goal target 16.9 calls for legal identity for all, including birth registration, by 2030.
Risks and criticism
- Privacy and surveillance. Central databases linking many services can reveal a detailed picture of a person's life, which is why privacy groups favour designs that share only the minimum data, supported by privacy-enhancing technologies.
- Security and fraud. A breach of an identity database, or stolen credentials, can enable account takeover and synthetic identity fraud on a large scale.
- Exclusion. Biometric checks can fail for manual workers with worn fingerprints, older people and those in areas with poor connectivity, which can block access to food rations or pensions when ID becomes mandatory.
- Legal limits. In September 2018 India's Supreme Court upheld Aadhaar for welfare and tax purposes but struck down the provision allowing private companies to demand it, a ruling that shaped how such systems may be used.