Identity Management
The wallet generates and manages the holder's cryptographic identity: their DID, private keys, and stored credentials. Everything happens locally on the device; there is no central server that custodies the keys.
Your DID
When creating the account, the wallet generates a DID (Decentralized Identifier) for the holder. This DID identifies the holder uniquely in the ISBE ecosystem and in any compatible SSI system.
DID method used
The wallet uses did:key for the holder. Optionally it can use did:jwk. These DIDs are derived directly from the holder's public key, without registration on any blockchain.
The holder's DID has the form:
did:key:z6MkszZtxCmA2Ce4vUV132PCuLQmwnaDD5mw2L23fGNnsiRn
The prefix z6Mk indicates that the base key is Ed25519. For secp256k1 keys the prefix is different.
The ISBE blockchain only stores the DIDs of accredited issuers. The holder's DID is local: it requires no transactions, has no costs, and needs no connectivity to be generated.
View your DID
In the wallet, go to Profile (or Identity) to see your full DID and copy it to the clipboard.
Backup and restoration
Cryptographic keys are stored exclusively on the device and are not synced to any server. There is no private key export mechanism or account restoration on a different device. If you uninstall the wallet or change device, you will need to create a new account and request credentials again from the issuers.
PIN and biometric authentication
The wallet is protected by a 6-digit numeric PIN. Additionally, if your device supports it, you can enable biometric authentication:
| Platform | Supported technology |
|---|---|
| iOS | Face ID, Touch ID |
| Android | Fingerprint, device facial recognition |
Change the PIN
Go to Settings → Security → Change PIN. You will need to enter the current PIN.
Auto-lock
The wallet locks automatically when it moves to the background. Every time you open it, you must authenticate with PIN or biometrics.
Delete the account
To delete the account from the device:
- Go to Settings → Account → Delete account.
- Confirm the operation by entering your PIN.
Deleting the account erases all private keys and credentials from the device. It is not possible to recover the identity or the credentials. You will need to create a new account and request credentials again from the issuers.
Deleting the account from the wallet does not revoke the credentials on the issuer side nor delete the DID from any external system.
Export the DID
The wallet allows exporting the DID document in JSON format for external use:
- Go to Profile → Export DID.
- Choose to share the document or copy it to the clipboard.
The exported DID document contains only the public key and the DID metadata. Private keys are never exported.