Privasys Wallet

Privasys Wallet is a digital identity wallet that lets you connect to services you can actually verify.

Before you share anything, the wallet cryptographically verifies the remote service's hardware integrity: what code is running, in what type of secure enclave, with what configuration. You see the result and approve before anything leaves your device.

Two-way trust: the service proves itself to you, then you prove yourself to the service.

HOW IT WORKS

1. A service displays a QR code (or sends you a push).
2. You scan or tap.
3. The wallet verifies the server's hardware attestation.
4. You review and approve.
5. Face ID or fingerprint unlocks your device-bound passkey.
6. You're signed in. No passwords, no shared secrets.

KEY FEATURES • Verified connections: hardware attestation, not just certificates. • Challenge any enclave: choose fast or challenge-mode verification, and demand a fresh, replay-proof liveness proof on any approval. • See the code you trust: jump from an approval to the published release the service is actually running. • Passkey sign-in: FIDO2/WebAuthn keys held only in the Secure Enclave. • Biometric-gated: every sign-in requires Face ID or fingerprint. • Passport & ID verification: read your passport or national ID chip over NFC and check it in a confidential enclave (genuine chip, not a clone, your live face matches the chip photo). Your raw document and selfie stay on your device. • Prove one fact, not your whole identity: over 18, an age band, or a single certified field, with nothing else revealed. • Session relay: extend verification to web apps that cannot attest themselves. The wallet verifies once, the browser inherits a sealed end-to-end session anchored inside the enclave. • Live sessions at a glance: each connected service shows a sealed badge, a countdown and its own audit trail; sign out individually. • Approve key operations from your phone: authorise a sensitive step-up with one biometric when a service pushes a request. • Profile management: import attributes from your verified document, or from Google, Microsoft, GitHub or LinkedIn, or add them manually. • Selective sharing: per-attribute consent on every sign-in; review consent history any time. • Account recovery: email verification, single-use recovery codes, or trusted guardians. Plus a 24-word BIP39 backup phrase you write down once. • Multi-device: enrol your phone, tablet and backup, manage them individually. • Push to approve: tap a notification and land on the approval screen. • Dark mode.

PRIVACY No analytics. No tracking. No data collected for advertising. The privasys.id identity service is zero-PII by design: it never stores your name, email, or any attribute, and everything that matters lives on your device. During optional identity verification, your document and selfie are sent over an attested, encrypted connection to a confidential enclave, checked in memory, and never retained.

Built by Privasys. Honest by design.