One account.
Every sign-in.
Your permission, always.
Identvia is a private, passwordless identity for the web. Sign in anywhere with a passkey, choose exactly what each app can see, and stay in control when AI assistants act on your behalf.
- Passwords stored
- 0
- ID per site
- Unique
- Standards
- OIDC
Private by design
Security you can explain in one sentence.
There is no password to steal, every app sees a different ID for you, and nothing is shared unless you switch it on.
Passkeys first
Sign in with Face ID, Touch ID, Windows Hello or a security key. Phishing-resistant by default.
A different ID for every app
Pairwise identifiers mean two apps can never match you up through Identvia.
You pick what is shared
Email, name and picture each have their own switch. Change your mind any time.
Two-step for everything that matters
Authenticator-app codes, single-use recovery codes and re-checks before sensitive changes.
A record you can read
Every sign-in, consent and token is logged in a tamper-evident, hash-chained audit trail.
Ready for AI agents
Built to approve, limit and revoke what assistants do for you, on the open AgentPass protocol.
For developers
Standard OpenID Connect. Strict where it counts.
Any certified OIDC library works. Identvia requires PKCE for every client, matches redirect URIs exactly, rotates refresh tokens and signs everything with rotating RS256 keys.
- Discovery, JWKS, userinfo, revoke, introspect, RP-initiated logout
- Authorization code + PKCE (S256 only), RFC 9207 issuer in responses
- Pairwise subjects and per-claim consent out of the box
<!-- 1. Put the button where you want it -->
<a href="/auth/identvia/start"
class="identvia-btn">Sign in with Identvia</a>
<!-- 2. Styles only. Secrets stay on your server -->
<script src="https://id.identvia.com/sdk/v1/button.js"
async></script>
Your AI should ask before it acts.
Agent approvals, scoped and time-limited grants and a one-tap “revoke all” are coming to your Identvia inbox next.