Skip to main content
Zero-knowledge verification uses Iden3 credentials, an advanced option the AIR team enables per request. Instead of sharing a claim, the user’s device proves a statement about it, such as “age is over 18”, without revealing the value.

​
How it differs from the default

​
How it works

For how Iden3 credentials and proofs are built, see How Iden3 credentials work.
  1. The verification program sets the condition to prove, for example “membership tier above Bronze”.
  2. The user’s device generates a proof that its issuer-signed credential meets the condition. The proof reveals the result, not the underlying value.
  3. The proof is checked off-chain, or on-chain by the Universal Verifier contracts on Moca Chain.

​
Verification modes

Without a required proof, an Iden3 presentation carries no cryptographic guarantee. Require a proof whenever the result drives access or value.

​
Revocation

Iden3 issuers prove non-revocation with a Merkle proof against their revocation tree, served from the issuer’s /credential-status endpoint. They also answer the standard revocation status endpoint. They do not publish a token status list. For setup, see Issue Iden3 credentials and Verify Iden3 credentials.