Docs · Concepts
Identity
An Ed25519 keypair and a did:key. What names a party in the Trust protocol.
What it is
An identity is an Ed25519 keypair whose public half is expressed as a did:key. It names an issuer, a subject or an approver, and it is verifiable by anyone holding the DID — no directory, no registry lookup, no service call.
bengar id create --name acme
# did:key:z6Mk…Why Ed25519, and where it stops
The Trust protocol — identities, permits, intents, proofs, revocations, key rotations and approvals — is Ed25519. Chain accounts are secp256k1, because a Cosmos account is. These are different domains and a key from one is never derived from the other.
A passkey is not an identity. It authenticates a person for a step-up; it signs nothing the protocol reads.