Identity
Digital identity: proving who is acting
Digital identity is the representation of a principal — a person, device, application, machine, or agent — so other parties can ask who is acting.
Knowledge graph
Authoritative introductions to digital trust. No unverified product claims, no thin keyword pages.
All topicsThis page
Identity
Last reviewed 2026-08-21
Next
Separate identity from authentication, then decide which principals you must bind.
Request a consultationWho this is for
Security architects, IAM leaders, and public-sector identity teams.
Problem
Accounts, credentials, and legal identity are routinely treated as the same thing.
What to do next
Separate identity from authentication, then decide which principals you must bind.
Knowledge topics
LibraryIdentity
Definition
Digital identity is a set of attributes and identifiers that refer to a principal in a system. It is not a password, not a session, and not automatically a legal identity document.
Useful identities are unique within a namespace, recoverable under policy, and bindable to authentication and authorization events.
Identity
Why it matters
Without identity, authorization is a guess. Without distinct identity types, an AI agent can inherit a human's privileges, or a stolen device can impersonate a person.
Identity is the first answer to: who is acting?
Identity
How it works
An identity lifecycle typically includes issuance, proofing or registration, credential binding, use, suspension, recovery, and revocation.
Proofing (establishing that a human is the claimed person) is different from authentication (proving control of an authenticator on a later request).
Identity
Identity types that must not be collapsed
Human identity: a person. Device identity: a phone, token, or hardware root. Application identity: a workload or client. Machine identity: a service, SIM, or IoT endpoint. AI agent identity: a software actor that may act with delegated authority.
Collapsing these types is a common source of over-privileged automation.
Identity
Limitations
Identity does not stop malware on an already-authenticated endpoint, and it does not replace network or application security.
A verified identity can still be misused if authorization is too broad or evidence is not retained.
Identity
Where this meets Keyra
Public Keyra materials describe Keyra as an identity trust layer for people, businesses, and nations. This page explains the concept; it does not list unpublished identity APIs.
Operational identity registries and admin tooling are not public marketing surfaces and are not documented here.
Questions
What people ask first.
Plain answers. No product claims that have not been published elsewhere on Keyra.ie.
Is identity the same as authentication?
No. Identity names the principal. Authentication proves that a later request is bound to that principal under a policy.
Is identity the same as identity verification?
Verification or proofing establishes confidence at issuance or recovery. Authentication repeats proof of control during use.