The LKP wallet

Creating a wallet#

Open your wallet, or start from any site that uses LKP. Creating one takes three steps:

• Create a passkey. Your device's Face ID, Touch ID, Windows Hello or a security key unlocks the wallet. If your browser can't use passkeys for encryption, you can choose a passphrase instead.
• Save your recovery kit. 24 words that can restore your wallet on any device. Write them down or store them in a password manager. We can't recover them for you.
• Add a credential. Verify an ID, a phone number, a work or school email, or a social, GitHub or bank account. You can also do this later, or when a site asks.

Credentials#

Every verification signs as many facts as it can, so you can answer more questions later without verifying again. They're stored encrypted in your wallet, and sites only ever learn yes/no answers to what they ask.

Government ID and quick age check

Scan your passport or ID card, or take a fast 1 to 2 second passive selfie with Didit. Didit processes the document, selfie and its telemetry under Didit's privacy policy; LKP never stores those images. Your wallet keeps your verified age and nationality facts. That is verified identity, not proof of where you are right now. Your exact birth date or age threshold is signed, so you can prove “18 or older” or “between 18 and 25” without revealing it. We request deletion of the Didit session once your credentials are issued.

Phone number and work or school email

Enter your number or address and type the code you receive. Your wallet keeps the number (with its country and line type) or the address (with its organisation's domain), so you can prove you own a mobile number, or have an address at a company or university.

Instagram, X, TikTok and GitHub

For Instagram, put a one-time code in your bio and use the TLSNotary browser extension to prove your profile shows it: your password never leaves your browser. For X, TikTok and GitHub, you sign in on the provider's own page. Your wallet keeps your username, follower and post counts, account age and verification badge; for GitHub also your repositories, contributions and organisations.

Bank account

Connect a bank through Enable Banking, an open-banking provider. Your wallet keeps the IBAN, account holder name and balance at that moment; your transactions are never read.

Verifying with a site#

• The site opens an LKP page showing its name and exactly what it is asking, for example “18 years or older”.
• You unlock your wallet. Your browser builds a zero-knowledge proof locally, which usually takes a few seconds.
• The site learns that the answer is yes, plus an anonymous ID that is different on every site. It never sees your birth date, nationality, number, address or username unless it asks you to prove that exact value.

Every verification is recorded in Activity, inside your encrypted wallet, so only you can see where you've used LKP.

Devices and recovery#

• New device: choose “Use recovery phrase” on the sign-in screen, enter your 24 words, then add a passkey on that device under Security.
• Lost everything: without your passkey and recovery kit, the wallet can't be decrypted, not even by us. Create a new wallet; to re-link an ID, number or account, contact support so the old credential can be revoked.
• Shared computer: Security → Remove from this device forgets the wallet in this browser. Your encrypted copy stays available for restoring elsewhere.
• Leaving for good: Security → Delete wallet erases the encrypted copy from our servers and this browser. Re-verifying the same document on a new wallet needs support, because the one-credential-one-wallet check remembers it.