UCID · Passkey authentication · Consent API · Six verification tiers.
ID3
Not a login button. A complete identity layer — issuance, authentication, consent, and tiered trust.
A permanent, verifiable identifier — not an email, not a username. One identity that follows you across every connected service.
No passwords. Ever. Your device biometrics are the key. Phishing-resistant authentication backed by the secure enclave.
Every data request requires explicit user consent. You control what's shared — scope by scope, service by service.
Six tiers from registered to institutional — services request the minimum level they need, and nothing more.
Each tier unlocks higher-trust interactions. Identity-verified tiers (ID3+) carry a profile photo on the card.
A pending application. No credential issued yet.
Passkey registered and email confirmed. Unlocks login, profile, and basic claims.
Profile and address reviewed. Unlocks verified-age (boolean) checks.
Government document and photo reviewed. Unlocks the protected profile photo claim.
Photo on cardIn-person or official document check. High-assurance interactions.
Photo on cardHighest assurance. Reserved for institutional-grade identity.
Photo on cardYour dashboard is the home of your digital identity. See your card, track verification progress, manage the passkeys on your devices, and review every connected app — all in one place.
Everything is yours to control. Revoke a device or an app's access at any time.
Privacy-first by design. Data minimization is the default — age checks return true/false, not your birthdate.
Add your credential to Apple Wallet as a pass. Tap to verify, anywhere — your card travels with you, scannable in a moment.
Apple Developer signing is required to produce a native, installable Wallet pass.
{
"formatVersion": 1,
"organizationName": "ID Platform",
"description": "ID Credential",
"generic": {
"primaryFields": [
{ "key": "ucid", "value": "DEMO 0000" }
],
"secondaryFields": [
{ "key": "tier", "value": "ID3" }
]
},
"barcode": {
"format": "PKBarcodeFormatQR",
"message": "https://id.pajic.it/id/verify/"
}
}Add ID authentication to any service with PKCE-secured OAuth 2.0 and an OIDC-compatible userinfo endpoint. Request only the scopes you need — your users consent to each one individually.
Standard authorization code flow with PKCE. Works with any language or framework.
Standard /userinfo endpoint. Scopes include ucid, verified_age, verification_level.
Every data request requires user consent — scopes are shown in plain language before approval.
Services integrate by requesting only the scopes they need. Three common integration patterns:
Identify the user with openid + ucid. No personal data beyond a stable identifier.
Request verified_age — the response is a boolean. The birthdate is never disclosed.
Request verification_level to confirm assurance tier (ID0–ID5) for high-trust flows.
Single sign-on for community members
openid · ucidBoolean age gate for restricted content
verified_ageTiered access for high-trust services
verification_levelEverything you need to know before applying for your UCID.
A UCID (Universal Credential ID) is a permanent, human-readable identifier — something like LEON 0001. Unlike an email address, it never changes and is not tied to any provider. It's the stable anchor for your identity across every service that accepts ID.
No passwords, ever. ID uses passkeys — your device's built-in biometric sensor (Face ID, Touch ID, Windows Hello) authenticates you. The private key never leaves your device. It's phishing-resistant by design.
Most services only require ID1 (account created) or ID2 (address verified). ID3 unlocks identity-verified features like a profile photo on your card. Services tell you upfront which minimum level they require — you're never surprised.
Your government document and selfie are encrypted before being stored and are only accessed by the ID review team for the purpose of verification. After the review is complete, they are not re-used or shared with third parties.
Only what you explicitly approve. An app that requests verified_age receives a boolean (true/false) — not your birthdate. One that requests ucid gets your identifier — not your name or address. You see every scope in plain language before approving, and you can revoke access at any time from your dashboard.
Yes. You can register a passkey on each device you use. From your dashboard, you can see every registered device and remove any you no longer use.
Minutes. Verify your email with a one-time code and you're through to a setup link right away — no manual review, no waiting. Follow it to register your passkey and reach ID01 instantly.
No. ID is free for individual users. Developers building integrations can register apps at no cost through the developer portal.
Verify your email and you're through — no manual review, no waiting.