Overview
Hyperledger Identus is an open-source toolkit for building digital identity systems that put people, not platforms, in control of their own credentials. It lets organizations issue tamper-proof digital documents — think a diploma, a membership card, or a proof of age — that the holder can then show to anyone, anywhere, without the issuer needing to be contacted every time. The project is hosted by LF Decentralized Trust, part of the Linux Foundation, and uses the Cardano blockchain as its public noticeboard for identifiers1.
Identus inherits the Atala PRISM codebase that IOG contributed to the Hyperledger community in October 2023 under the earlier name Open Enterprise Agent2. It is aimed at developers and organizations that want to add decentralized identity to their apps, online services, or community platforms — a space adastack tracks in the identity category.
Key Features
- Works with open web standards. Identus is built around the W3C decentralized identifier specification, verifiable credentials in AnonCreds and JWT formats, and DIDComm v2 for private messaging — so credentials stay portable across wallets and services1.
- Complete issue-hold-verify stack. A Scala-based Cloud Agent handles issuing and checking credentials, a messaging relay called the Mediator moves them between parties, and an Apollo library supplies the underlying cryptography3.
- Wallet building blocks in three languages. Ready-made developer kits target web and Node, Apple platforms, and Android and server-side Java, so teams can add credential storage to existing apps — useful for anyone shipping identity wallets on Cardano2.
- Cardano-anchored public record. A dedicated Verifiable Data Registry driver uses Cardano as the ledger where identifiers are published, giving a credential a place it can always be looked up from2.
- Community-governed roadmap. Maintainers span IOG, Blocktrust, Socious, CSign, and Trust0, with a public technical charter and weekly open community calls4.
What to Expect
Visiting the Hyperledger Identus site lands on a documentation portal rather than a marketing landing page — the project is tooling, not a consumer product. A curious reader will find a Learn section explaining self-sovereign identity, a Developers section with tutorials for the Cloud Agent and wallet kits, and a Reference section with the Cloud Agent API specification.
For organizations, the path is to run an Identus Cloud Agent (typically in the cloud or on their own servers) and wire it into an existing app to issue or check credentials. For developers, it is to pull one of the wallet kits into a mobile or web app and let users hold their credentials there. Cardano users meet Identus indirectly: the team has been integrating its identity capabilities into the Lace wallet, and a planned extension will support Midnight, one of Cardano's partner chains4. A dedicated third-party security audit for the main codebase is not publicly disclosed; the repository includes a vulnerability-reporting policy for researchers.
