Skip to main content

DID

A DID, or Decentralized Identifier, is a globally unique identifier that does not depend on a central registry. It lets issuers, holders and verifiers reference each other and resolve public keys without a central authority.

A DID resolves to a small document listing the public keys and service endpoints its owner controls, so anyone can verify a signature made with that DID without asking a third party for permission. In the EUDI Wallet under eIDAS 2.0, DIDs commonly identify issuers and, in some credential formats, holders, giving every participant a stable, portable identifier that works the same way across every member state.

Who controls a DID?

The organisation or person the DID identifies, called its subject, controls it by holding the private key that matches the public key in the DID document. No registry or central authority can revoke or reassign a DID on its subject's behalf.

Back to the glossary