153m IDs Exposed: Secure Fix Unveiled
ProveKit's zero-knowledge proofs let you verify age or ID on your smartphone without revealing personal data, a game-changer after 153m driver's licenses hit the dark web
World has introduced ProveKit, an open-source zero-knowledge proving toolkit, to enable private ID checks on smartphones. This move allows users to prove specific facts about themselves, such as being over a certain age or holding a valid identity document, without revealing the underlying personal data.
ProveKit generates proofs locally on a smartphone or browser, meaning the underlying information does not need to be sent to an external server for processing. This approach is designed to reduce the risk of sensitive information being compromised, as seen in recent breaches such as the Nexus incident, where a dark web service is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada.
The Nexus breach, reported by security researcher Brian Krebs, has led to the FBI opening an investigation into the source of the breach. The records reportedly include front and back scans, infrared and ultraviolet images, and timestamps tied to everyday moments like renting a car or visiting a dispensary.
ProveKit is built to move away from the model of handing a business their actual license or passport, which then has to be stored somewhere and becomes a target. The technology behind World ID can let people prove their age, nationality or possession of a valid ID without handing over the personal information behind it.
## Why it matters The release of ProveKit comes at a time when the risks of the status quo are hard to ignore. With the increasing number of data breaches, it is essential to have a secure and private way to verify identities. ProveKit provides a solution to this problem, enabling users to prove specific facts about themselves without revealing sensitive information. This technology has the potential to revolutionize the way we verify identities, making it more secure and private for individuals.
## What happens next The open-sourcing of ProveKit gives developers a new way to build identity checks that can happen directly on a user’s phone rather than sending sensitive information to a third party. This move is expected to lead to the development of more secure and private identity verification systems, reducing the risk of data breaches and protecting sensitive information.
