OpenID for Verifiable Credential Issuance (OpenID4VCI)
An OpenID Foundation protocol that defines how an issuer delivers verifiable credentials to a holder's wallet, building on OAuth 2.0. Together with OpenID4VP it is emerging as the dominant transport for decentralized credentials, and underpins the EU's EUDI Wallet.
OpenID4VCI matters because it lets wallets and issuers interoperate without bilateral integration: the wallet discovers what a credential offer contains and how to obtain it using OAuth machinery developers already have. It is the issuance half of the stack the EU wallet standardized on, which effectively settled a decade-long argument about credential transport in favor of OAuth-based flows over bespoke DIDComm messaging.
See also: OpenID4VC, OpenID4VP, verifiable credential, digital wallet
Related on Start with Identity
- GlossaryVerifiable Presentation (VP)
A signed package a holder sends to a verifier that bundles one or more verifiable credentials, or claims derived from them, along with proof that the presenter
- RankingBest Verifiable Credential Platforms: Issuance & Verification Infrastructure
The best verifiable credential platforms in 2026: MATTR, Procivis, SpruceID, walt.id, and Hyperledger. Ranked for standards conformance (W3C VC, SD-JWT, OpenID4
- GlossaryAnonCreds
A verifiable credential format, originating in Hyperledger Indy and now a standalone specification, built around zero-knowledge proofs for strong selective disc
- GlossaryBBS Signature
A signature scheme that lets a holder reveal only a subset of the fields in a credential while keeping the issuer's single signature valid, without the issuer's
- ArticleTop 7 Open-Source Decentralized Identity and Verifiable Credential Tools
The best open-source decentralized identity tools in 2026, from Credo and ACA-Py to walt.id, Veramo, SpruceID, CREDEBL, and Sphereon, compared on credential for
- Blog1Password buys Apono, moving from credential vault to access control plane
Reported at 250 to 300 million dollars, the deal gives 1Password just-in-time privileged access across AWS, Azure, GCP, Kubernetes, Snowflake, and Databricks, a