UNTRACEDocumentation

DID Passkey Wallet

The Untrace DID Passkey Wallet creates a simple, self-custodial wallet from a WebAuthn passkey. Users can authenticate with the same secure device-native flow they already use for passkeys, while Untrace uses that wallet as the control point for decentralized identity.

How It Works

Untrace generates a passkey wallet through WebAuthn, binding the wallet to the user's device-backed authenticator instead of a password or seed phrase. The passkey wallet can then be used to mint a W3C-compatible DID on EVM or Solana.

That DID becomes the user's portable identity for Untrace access control:

  • authorizing access to sharded documents
  • proving which DID is allowed to reconstruct or read shards
  • sharing encrypted documents with other DIDs
  • removing the need for usernames, passwords, or centralized identity accounts

Why Passkeys

Passkeys make DID onboarding easy for non-technical users. They provide phishing-resistant authentication, device-level protection, and a familiar login experience while preserving self-custody.

Because the resulting DID follows W3C decentralized identity principles, it can be used across chains and applications instead of being locked to one centralized provider.

Role in Sharded Documents

When documents are split across Untrace data vaults, the DID minted from the passkey wallet is used in the access-control layer. Only approved DIDs can request, decrypt, reconstruct, or receive shared document shards.

This keeps data ownership simple: users control access with a passkey wallet, and documents can be shared directly from one DID to another.