SD-JWT
SD-JWT, short for Selective Disclosure JSON Web Token, is a credential format that lets a holder reveal only some of the claims inside a signed token while keeping the rest hidden, without invalidating the signature.
Each claim in an SD-JWT credential is individually hashed and salted, so the holder can strip out any claim they do not want to share and the verifier can still check the remaining ones against the issuer's signature. SD-JWT VC is the profile the EUDI Wallet uses under eIDAS 2.0 for credentials such as a mobile driving licence or an age attestation, where privacy by design is a legal requirement, not just a nice extra.
Related terms
Is SD-JWT the same as a JWT?
No. A regular JWT signs one fixed block of claims that a verifier either sees in full or not at all. SD-JWT signs the same claims but hashes each one separately, so a holder can leave individual claims out of what they send while the remaining ones still verify against the original signature.