UID.one

one is a digital identity platform designed to provide user-controlled, hardware-bound authentication without relying on centralized storage of credentials. It addresses the risks associated with traditional identity solutions, where companies store user credentials on servers that can become targets for data breaches. one itself.

The platform offers several components tailored to different use cases. For individual users (B2C), UID Vault replaces passwords with passkeys and native WebAuthn authentication, binding identity to device hardware and enabling phishing resistance from the outset. For organizations (B2B), UID Link operates as a browser extension that enhances security by auto-filling legacy credentials, supporting document signing, and preventing data loss. It features content-aware data loss prevention (DLP), session binding to prevent stolen cookies, phishing prevention, verified cryptographic email signing, an AI-based trust filter, and screen capture blocking. 0, OIDC, and WebAuthn, with free single sign-on (SSO) included. The SDK issues OIDC-compatible JWTs with local JWKS authentication, allowing applications to verify user identity cryptographically and offline, without relying on a central server.

one supports client-side KMS envelope encryption, with integration options for AWS KMS or Secrets Manager, and features a multi-tiered cache for redundancy. The system is built to prioritize offline operation, and all identity verification is performed mathematically rather than by policy or promise. The platform operates as a subscription-based service, with a free tier available that does not require a credit card to get started.

one is positioned as an open-standard identity layer for the internet, emphasizing user sovereignty and cryptographic guarantees over trust in third-party providers. It supports protocols such as WebAuthn, FIDO2, OIDC, and SAML, and is designed for both individual and organizational use cases where privacy, security, and decentralization are prioritized.