Decentralized Identifier (DID).

A W3C-standard identifier that a subject controls directly, independent of any centralized registry, and that resolves to a cryptographic key material document. It belongs to the Identity & Access category of cybersecurity.

A W3C-standard identifier that a subject controls directly, independent of any centralized registry, and that resolves to a cryptographic key material document.

A DID is a globally unique identifier defined by the W3C DID Core specification that lets people, organizations, devices, or services prove control of an identifier without relying on a centralized registry, identity provider, or certificate authority. Each DID resolves through a method-specific resolver to a DID Document containing public keys, authentication methods, and service endpoints. Different DID methods anchor the document in blockchains, key-event logs, the DNS, or peer-to-peer channels. DIDs are a foundational building block for self-sovereign identity, verifiable credentials, and privacy-preserving authentication, enabling users to present cryptographically signed claims without disclosing identifiers controlled by a third party.

Defences for Decentralized Identifier (DID) typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: DID, Decentralized identity ID.