Privasys Wallet

Privasys Wallet is a digital identity wallet that lets you connect to services you can actually verify.

Before you share anything, the wallet cryptographically verifies the remote service's hardware integrity: what code is running, in what type of secure enclave, with what configuration. You see the result and approve before anything leaves your device.

Two-way trust: the service proves itself to you, then you prove yourself to the service.

HOW IT WORKS

1. A service displays a QR code (or sends you a push).
2. You scan or tap.
3. The wallet verifies the server's hardware attestation.
4. You review and approve.
5. Face ID or fingerprint unlocks your device-bound passkey.
6. You're signed in. No passwords, no shared secrets.

KEY FEATURES • Verified connections: hardware attestation, not just certificates. • Challenge any enclave: choose fast or challenge-mode verification, and demand a fresh, replay-proof liveness proof on any approval. • See the code you trust: jump from an approval to the published release the service is actually running. • Passkey sign-in: FIDO2/WebAuthn keys held only in the Secure Enclave. • Biometric-gated: every sign-in requires Face ID or fingerprint. • Passport & ID verification: read your passport or national ID chip over NFC and check it in a confidential enclave (genuine chip, not a clone, your live face matches the chip photo). Your raw document and selfie stay on your device. • Prove one fact, not your whole identity: over 18, an age band, or a single certified field, with nothing else revealed. • Session relay: extend verification to web apps that cannot attest themselves. The wallet verifies once, the browser inherits a sealed end-to-end session anchored inside the enclave. • Privasys Drive: browse your confidential personal drive and control access to it. Your files live inside an enclave that only you can open, you approve every request to access a file, and Privasys cannot read your files. • Live sessions at a glance: each connected service shows a sealed badge, a countdown and its own audit trail; sign out individually. • Approve key operations from your phone: authorise a sensitive step-up with one biometric when a service pushes a request. • Profile management: import attributes from your verified document, or from Google, Microsoft, GitHub or LinkedIn, or add them manually. • Selective sharing: per-attribute consent on every sign-in; review consent history any time. • Account recovery: email verification, single-use recovery codes, or trusted guardians. Plus a 24-word BIP39 backup phrase you write down once. • Multi-device: enrol your phone, tablet and backup, manage them individually. • Push to approve: tap a notification and land on the approval screen. • Dark mode.

PRIVACY No analytics. No tracking. No personal data collected. The privasys.id identity service is zero-PII by design: it never stores your name, email, or any attribute, and everything that matters lives on your device. During optional identity verification, your document and selfie are checked inside a confidential enclave that Privasys cannot read, and are never retained.

Built by Privasys. Honest by design.