Fravash turns the chip already in your pocket into a digital ID: a reusable proof that a real person is here, held on your phone and readable by no one.
real_human
A real person is here
A genuine state-issued chip was read on this device.
age_over_18
Old enough
A yes or a no. The date behind it never leaves the phone.
pseudonym
The same person as before
Stable at one site, unlinkable across sites. One person, one account.
acting_for
An agent, sent by a person
An agent presents your proof and its mandate. The site learns a real human is behind it, not which one.
Step 01
Read the chip
Hold your passport or ID card to the phone. The app checks the issuing state's signature on the chip.
Step 02
Keep the key
A key is created in your phone's secure hardware. It cannot be exported, and only signs when you unlock it.
Step 03
Answer the question
You see what is being asked and why, then approve with Face ID or a fingerprint.
What a verifier receives
A signed answer to the question they asked.
A pseudonym that is stable for their site only.
An assurance record saying how the check was made.
What nobody receives
Your name, date of birth or document number.
Your photograph or anything from the chip.
A record linking what you did on one site to another.
Person to person
Send a link to anyone. They approve with Face ID or a fingerprint and you see one line back: a real human, verified. No integration, nothing installed on your side.
Ask → Approve → Verified real human
Useful the first time you use it, which is the point.
On your product
Twenty lines of code puts a gate in front of a sign-up, a checkout or a listing. A QR on desktop, a deep link on mobile, a webhook with the answer.
Request → Approve → Signed result
EU hosted, and no personal data to store.
acme.com asks: a real person, over 18. Purpose: create an account.
You approve with Face ID or a fingerprint. The key signs on the phone.
Verified. real_human true, age_over_18 true, pseudonym 5f3c. No name, no date of birth.
The person delegates
You approve a mandate on your phone: what the agent may do, for how long, at which sites. Signed by your key.
The agent presents
Proof and mandate travel together. The site learns a real human authorised this, never which one.
You can withdraw it
A mandate expires on its own and is revocable at any moment. Every use is listed in the app.
A web with real people in it.
The app is in closed testing and the SDK is open to a first group of teams.
Contact us
Tell us what you need to verify.
Every message is read by someone who can answer it.