Decentralized identity (DID) replaces traditional username-password logins with cryptographic keys held by users. The web3 portal on AI App Platform implements DID by generating a unique identifier from a user’s wallet address. This identifier is stored on-chain, meaning no central server holds your credentials. When you connect a wallet like MetaMask or WalletConnect, the portal verifies ownership via a signature request-no private keys are transmitted. This eliminates phishing risks and account takeovers common in Web2.

Each DID is linked to verifiable credentials (VCs) issued by trusted entities. For example, a KYC provider can sign a VC proving you’re over 18 without revealing your birth date. The portal stores these VCs in an encrypted, user-controlled data vault. Access requires your wallet signature, giving you granular control over what data apps can see.

Wallet Connection Flow

Connecting a wallet is a three-step process: first, the portal detects your browser extension or mobile wallet via the WalletConnect protocol. Second, it sends a challenge message for you to sign-this proves you control the address. Third, the portal derives your DID and loads your profile. No email or password is needed. The connection persists via session tokens, but you can revoke access anytime from your wallet’s connected sites list.

The portal uses a hybrid architecture: identity metadata lives on a Layer 2 blockchain for low fees, while large files (like profile pictures) go to IPFS with content-addressed hashes. Your wallet’s private key remains the master key-if you lose it, you lose access. Recovery options include social recovery via trusted wallets or multi-sig setups. The portal never holds keys, so server breaches don’t expose user identities.

Data sovereignty is enforced through zero-knowledge proofs (ZKPs). When an app requests your age, the portal generates a ZKP that confirms “over 18” without revealing your actual birth year. This minimizes data leakage. All interactions are logged on-chain for auditability, but the logs contain only hashed references-no raw personal data.

Decentralized identity unlocks frictionless onboarding for DeFi platforms, DAOs, and NFT marketplaces. A user connects their wallet once and can access any service using the same DID. For example, a lending protocol can instantly verify your credit history via VCs without repeated KYC. This reduces drop-off rates by 60% compared to traditional registration flows.

Developers benefit from standardized APIs. The portal exposes REST and GraphQL endpoints for DID resolution, VC issuance, and wallet authentication. Integration takes hours, not weeks. The platform also handles chain abstraction-users can connect wallets from Ethereum, Polygon, or Solana, and the portal normalizes them into a single DID.

What wallets are supported?

MetaMask, WalletConnect, Coinbase Wallet, and any EIP-1193 compliant browser extension. Mobile wallets via WalletConnect v2.

Can I use the same DID across different blockchains?

Yes. The portal aggregates multiple wallet addresses into one DID. You can link Ethereum and Solana wallets under the same identity.

What happens if I lose my wallet?

Without recovery setup, you lose access. We recommend configuring social recovery (3 trusted guardians) or a hardware wallet backup during initial setup.

Is my data visible on-chain?

Only hashed identifiers and VC metadata. Actual personal data stays in your encrypted vault. ZKPs ensure verifiers see only what you authorize.

How does the portal prevent Sybil attacks?

It checks wallet age, transaction history, and optional VC-based reputation scores. New wallets get limited permissions until they accumulate on-chain activity.

Alex K., DeFi Developer

Integrated the portal in 4 hours. The DID resolution API is clean and the wallet connection flow just works. No more managing user databases.

Maria S., NFT Collector

I control my identity without trusting a company. The ZKP feature for age verification is brilliant-no more uploading my passport to random sites.

John D., DAO Contributor

We use the portal for voting eligibility. Members connect wallets, and the DID system checks their VC without exposing personal details. Huge privacy win.