Digital ID: what it is and how it works

"Digital ID" gets used for two different things, which causes confusion.

Meaning 1: your digital identity in general

NIST's Digital Identity Guidelines define a digital identity as the unique representation of a subject engaged in an online transaction. In plain terms, it's how a service knows it's you: an account, a login and the details linked to it. NIST notes that a digital identity is unique within a given service, but doesn't always have to be traceable to a real-life person. One person usually has many: one for email, one for banking, one for each social network.

Meaning 2: a government or official digital ID

In news and policy, "digital ID" often means a government-backed credential that lives on your phone or in an app, such as a digital driver's license or a national e-ID. It proves who you are online or in person without a physical card. Whether you can get one, and what it's accepted for, depends on your country and, in the US, your state.

How a digital identity is verified

NIST separates two steps. Identity proofing establishes that a person is actually who they claim to be, for example by checking a document. Authentication checks that you control the credential tied to the identity, using a password, a code or a device.

A typical case: you open a bank account online. The bank checks your ID document (proofing). Next time you log in with a password and a code from your phone (authentication).

Why it matters

Your digital identity is a target. If someone gets your login details and personal information, they can impersonate you to open accounts or take over existing ones. A digital ID that is well protected can reduce fraud, but the same data in the wrong hands can make it worse.

Digital ID vs. digital footprint

A digital ID is the credential or identity you use to prove who you are. Your digital footprint is the trail of data you leave behind online.

How to protect yourself

Use strong, unique passwords and two-step verification

Your logins are the core of your digital identity. A password manager makes unique passwords practical, and two-step verification stops a leaked password from being enough.

Prefer phishing-resistant sign-in where offered

Passkeys and security keys are harder to trick out of you than passwords and codes.

Be careful when uploading ID documents

Only submit a passport or license to services you've chosen to use, from the official app or site, never through a link someone sent you.

Keep the details that prove your identity out of public view

Your name, birth date, address and phone number are what criminals combine to pass identity checks. Serus finds where your personal details are listed and removes them, and monitors the dark web and breach databases for your email and passwords.

Review your accounts regularly

Close accounts you no longer use and check your credit reports for accounts you didn't open.

Frequently asked

What is the digital ID?

It depends on the country. In some, it's a specific government-issued app or credential. In general use, it simply means the online identity you use to log in and prove who you are.

Is digital ID the same as a digital driver's license?

A digital driver's license is one kind of government digital ID. The term covers more than that, including national e-IDs and the logins you use with services.

Is a digital ID safe?

That depends on how it's designed and how you protect it. Use a screen lock, keep your device updated and don't share codes. Check the rules in your country for what data is shared when you use it.

What's the difference between identity proofing and authentication?

Proofing confirms you are who you claim to be, usually once, when you sign up. Authentication confirms it's you each time you log in.

What is digital ID?