Face ID, for every identity check in your life.
Presenting a spaceID is one gesture: a biometric unlock on hardware you own releases exactly one consented, verified answer — and writes you a receipt. This is the deep dive: the protocol, what verifiers see and never see, how humans verify each other, the threat model, and the evidence that the whole world is already converging on present-don't-disclose identity.
The world is already converging on presented identity.
This is not speculative. Every major platform, regulator, and population-scale identity system is moving the same direction: keep the data on the person's device, present a scoped verified answer, unlock it biometrically. Verified as of July 2026, sources below.
US mDL programs live
Mobile driver's licenses under ISO/IEC 18013-5 — 15 states in Apple Wallet, 11 in Google Wallet. Presentation is attribute-scoped and device-retained; no phone-home to the DMV.
TSA accepts presented ID
Digital IDs presented from smartphone wallets verify identity at TSA checkpoints for domestic travel — the reader gets the needed attributes, never the full record.
Passkeys in use
Biometric-unlock-on-device is the mainstream authentication UX — 93% sign-in success, 73% faster than passwords (FIDO Alliance, Oct 2025). Over 1B users sign into Google with passkeys.
EU wallet mandate
Every EU member state must offer a free EU Digital Identity Wallet (eIDAS 2.0); banks, telecoms, and 45M+-user platforms must accept it by late 2027. Selective disclosure is required by law.
Aadhaar authentications
India's 1.4-billion-person identity system handles ~2.2 billion authentications monthly, including 15M face-biometric checks in a single peak day — population-scale presented identity, proven.
The cost of disclosure
US data-breach victim notices issued in 2024 (up 312% YoY). Marriott alone exposed ~383M guest records including 24M passport numbers — identity data organizations never needed to hold.
Four steps. Nothing raw ever moves.
The ask — scoped, named, visible
A verifier (hotel desk, age gate, bank, another human's Agent One) requests exactly the attributes it needs: "over 21," "real verified guest," "licensed producer," "payment-eligible." Never "send us your ID." The request itself is signed, so you know who is asking.
The unlock — your face, your hardware
You see precisely what is being asked, and you approve with a biometric unlock on hardware you own — exactly the Face ID gesture you already trust. No recitation of phone numbers, no handing over a document, no form. Coercion-resistant: nothing is presentable without your live, deliberate act.
The answer — a verified yes, not your data
Your spaceID releases one cryptographically signed, consented answer scoped to that moment — verifiable against the issuing authority, useless if replayed, revealing nothing beyond the answer itself. Your name, number, and documents stay in your vault.
The receipt — auditable, revocable, yours
Every presentation writes a receipt only you can read: who asked, what was shared, when. Standing grants are revocable any time. This is where spaceID goes beyond today's wallets — you keep proof of every consent you ever gave.
Where humanity uses it.
The vision: every human shares a spaceID instead of a phone number — and anyone, anywhere, human or agent, can verify exactly what they consent to reveal. Identity becomes something you present, never something you surrender.
Hotels & restaurants
Check in as a verified, trusted guest. The property never stores your passport — and never becomes the next 383M-record breach.
Banks & KYC
Prove identity, residency, and source-of-funds attributes by consent — regulated-grade verification without a folder of photocopies living in a branch.
Age gates that respect adults
Prove "18+" or "21+" with a verified attribute — not an uploaded ID. Twenty-plus US states and the UK now require age assurance; spaceID answers without surveilling.
Airports & borders
The mDL/TSA pattern, generalized: present, verify, walk. Works alongside — not instead of — government ID where law requires it.
Anyone verifies anyone
Share your spaceID handle with a person you just met; their Agent One verifies "real, verified human, consented to be known to you" — and yours verifies theirs back. Trust becomes mutual and instant.
The plumber, the courier, the date
Before you open the door, their spaceID presents "licensed contractor," "verified courier for this delivery," "the person from the app." Strangers become verifiable without either side oversharing.
Clinics & pharmacies
Insurance eligibility and prescriptions as verified attributes, not clipboards of your history handed to every front desk.
Hiring & credentials
Degrees, licenses, and work eligibility presented as issuer-signed attributes — the directory's "claim your listing" flow is this exact ceremony.
Designed against the real attacks.
Answers expire
Presentations are one-time, session-bound, and cryptographically scoped — a captured answer verifies nothing tomorrow.
Requests are visible
Verifiers must name every attribute; you see the ask before the unlock. “Send us everything” is not a request the protocol can express.
Live consent only
No standing tokens to steal, no card to lift. A presentation requires your live biometric act, and it always leaves a receipt you can audit.
Unlinkable by design
Like the EU wallet's legal requirement: presentations can't be combined into a profile. The issuer isn't pinged when you present — the DMV-doesn't-know property mDLs already have.
Where spaceID goes further.
One surface, every context
Apple's Digital ID stops at TSA and one passport; state mDLs fragment across wallets; the EUDI Wallet stops at EU borders; Aadhaar at India's. spaceID is the universal presentation surface they all gesture at — any verified attribute, any context, any country.
Proof you can hold
Today's wallets deliberately record nothing — which protects privacy but leaves you no proof of what you agreed to. spaceID's PCHP receipts give you an auditable, private record of every presentation, and revocation with teeth.
Replaces handed-over identity
Loyalty numbers, usernames, phone-number-as-identity, photocopied passports — absorbed into one self-owned identity. Businesses verify without holding the liability; 1.73 billion breach notices a year is the bill for the old way.
The presentation layer, in plain English.
Is this the same as Face ID?
It uses the same gesture and the same trust anchor — a biometric unlock on hardware you own — but Face ID today unlocks your phone and Apple's wallet flows. spaceID generalizes the pattern: the unlock releases one consented, verified attribute to any verifier in the world, human or agent, with a receipt. Face ID proves it's you to your device; spaceID lets your device prove exactly one thing about you to anyone you choose.
What does the verifier actually receive?
A short-lived, cryptographically signed answer to the question they asked — "over 21: yes," "verified guest: yes," "licensed: yes, NPN on file" — verifiable against the issuing authority. Not your name, not your number, not a document image. Presentations are scoped to the moment and useless if replayed.
What if someone forces me to present?
Nothing is presentable without a live biometric act by you, on your hardware, with the request displayed. There are no standing tokens a thief can lift, and every presentation is receipted — a record coercion cannot erase. It is strictly safer than today's world, where anyone holding your ID card holds everything on it.
Does this replace my government ID?
It complements it. Where law requires government-issued identification, spaceID presents alongside it — exactly as mobile driver's licenses do at TSA today. The 21-state mDL rollout and the EU wallet mandate show regulators actively moving toward presented identity.
When can the world use this?
The rails are being laid now: the spaceID underpins every 🤫 Agent One, the Gold ID is its carry-everywhere tier on the roadmap, and the standards it rides on — ISO 18013-5 presentation, W3C Verifiable Credentials 2.0, FIDO biometric unlock — are already shipped web standards with billions of users. Rollout is consent-first, venue by venue.
Every claim above, cited.
- Credence ID — US mDL State Tracker (21 live jurisdictions, March 2026)
- Apple Newsroom — Digital ID launch; TSA acceptance at 250+ airports (Nov 2025)
- SpruceID — how ISO 18013-5 mDL presentation works at TSA (device-retained, no phone-home)
- W3C — Verifiable Credentials 2.0 Recommendation with selective disclosure (May 15, 2025)
- FIDO Alliance, Authenticate 2025 — 3 billion passkeys; 1B+ Google users; BankID Norway
- European Commission — EU Digital Identity Wallet: free wallets by 2026, selective disclosure by law
- eIDAS 2.0 — mandatory business acceptance of the EUDI Wallet by late 2027
- Free Speech Coalition v. Paxton (SCOTUS, June 2025) — age-verification laws upheld; ~23 states
- UK Online Safety Act — highly effective age assurance in force July 2025; digital identity wallets accepted
- Government of India / UIDAI — 2.21B Aadhaar authentications in August 2025; 15M face-auths in one day
- TechCrunch — Aadhaar's 1.4B IDs and new selective-disclosure QR presentation (Feb 2026)
- Google — Wallet ID passes expansion + zero-knowledge-proof age verification (April 2025)
- ITRC — 1.73 billion US breach-victim notices in 2024 (+312% YoY)
- FTC / state AG settlements — Marriott: ~383M guest records, 24M passports exposed
One identity. Presented, never surrendered.
The spaceID is how every human eventually proves what's needed and protects everything else — like Face ID, for the whole world.
The spaceID presentation layer is on the roadmap and rolls out consent-first; it complements, not legally replaces, government-issued identification where required. Landscape facts verified 2026-07-17; sources above. One is a product of Hushh Technologies Corporation (brand: 🤫 “hussh”), an independent company. One runs on third-party silicon, systems, and cloud; all company names are used solely to describe the platforms on which One software runs. Hushh Technologies is not affiliated with, endorsed by, sponsored by, or partnered with any company named.