Digital identity is the collection of information and credentials that identifies a person, organization or device in digital systems. It includes usernames, email addresses, account profiles, government-issued digital IDs, certificates and behavioral attributes that services use to recognize you.
Why it matters
Almost every online service depends on knowing who you are. Identity involves three separate steps: identification (claiming who you are), authentication (proving it, with a password, passkey or multi-factor authentication) and authorization (what you are allowed to do). Weak identity controls lead to account takeover, while excessive identity collection raises privacy risk. Systems such as SSO and OAuth let one identity be used across many services, and KYC checks tie it to a real person.
Example
Logging in with "Sign in with" a provider:
- You choose the provider on the app's login page.
- The provider authenticates you, possibly with a passkey.
- The app receives a token confirming your identity and a limited set of attributes, such as your name and email.
The app never sees your provider password.
Common mistakes
- Reusing one password across many accounts.
- Treating an email address as proof of identity.
- Linking accounts without checking which data is shared.
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
This page is general information written by our editorial team and updated when documentation changes. Servers and providers differ, so test changes safely first. See our editorial policy and disclaimer.