Definition
A Decentralized Identifier (DID) is a new class of identifier that lets a person, organization, or device prove control of a digital identity without relying on a central registry, an identity provider, or a certificate authority. A DID is just a string, such as did:key:z6Mk..., that resolves to a DID document describing the public keys and service endpoints needed to interact with the subject. Because the holder generates and keeps the corresponding private keys, the identifier is owned outright rather than rented from a platform.
Why it matters for sovereignty
Conventional logins are federated: Google, Apple, or a national ID system vouches for you, and can revoke or surveil you. A DID inverts that relationship. You can publish a DID anchored to a blockchain, a peer-to-peer network, or simply derived from a key pair, and anyone can verify your control of it by checking a signature. The same self-custody discipline a Bitcoiner applies to seed phrases applies to DID keys: lose them and you lose the identity, so backup and key rotation matter.
Methods and resolution
The portion after did: names a method (for example did:key, did:web, or did:ion) that defines how the identifier is created, resolved, and deactivated. Resolving a DID returns its document; updating the document lets you rotate keys without changing the public identifier. DIDs are the foundational layer beneath verifiable credentials and self-sovereign identity wallets.
DIDs v1.0 became a W3C Recommendation in 2022. Related concepts on this site include the Verifiable Credential and the broader model of Self-Sovereign Identity.
In Simple Terms
A Decentralized Identifier (DID) is a new class of identifier that lets a person, organization, or device prove control of a digital identity without relying…