For people
Show a site you're a real person.
Keep who you are to yourself.
Some sites only allow one account per person, to keep out bots and fake accounts. Human Pass lets you prove that once, with your ID, and then sign in to any of those sites without giving them your name, your ID or your email.
What to expect
A few minutes, once.
After that, it's a normal sign-in on every site that uses Human Pass.
-
1
Choose how you'll sign in
A passkey (your phone's or computer's fingerprint, face or PIN) or an email and password. We confirm your email with a code either way, so we can reach you about your account.
-
2
Verify your ID, once
A specialist verification provider asks for a photo of a government ID (passport, driver's licence or national ID card) and a short live selfie. When the check is done, we have them delete it.
-
3
Continue with Human Pass
On any site with the button, sign in and agree to share. The site learns you're a verified, unique person, and nothing else.
Your privacy
What each side knows about you.
The site gets
- A yes: you're a real person whose ID has been checked, and you don't have another Human Pass.
- An ID for you on that site only. It's the same every time you come back, so the site knows it's you. Every other site gets a different one, so sites can't compare notes to follow you around.
Not your name, birthday, address, ID number, photo, or email.
Human Pass keeps
- A one-way fingerprint of your ID's number, made with a secret key. It's how we know the same ID hasn't been used twice. It can't be turned back into the number, and it isn't your name or photo.
- Your email, encrypted, for sign-in, password resets and security notices.
- How you sign in: your passkeys and, if you set one, a scrambled form of your password.
No ID photos, no selfies, and no list of the sites you use.
The verification provider
- Sees your ID and selfie while it checks them, and tells us the result.
- Deletes them when we ask, right after the check.
It's never told which site sent you.
-
You choose each site
The first time a site asks, you're asked whether to share. You can stop sharing with a site from your account at any time.
-
We don't sell data
Sites pay for the yes-or-no answer. We don't sell, rent or share information about you.
-
Free for you
Creating and using a Human Pass costs you nothing.
-
You can delete it
Delete your Human Pass from your account. See the questions below for what's kept afterwards, and why.
If something goes wrong
Getting back in, and keeping others out.
Forgot your password or lost your passkey
Ask for a reset link by email. It works once, for 30 minutes, and lets you set a new password.
Lost access to your email too
Verify your ID again. We'll recognise the document and add a new sign-in to your existing Human Pass, with the same ID on every site.
Someone else uses your ID
A new sign-in added this way is held for 72 hours, and we email you when it's added and before it starts working. One click on "Not you? Stop it" cancels it. You can set the wait anywhere from one day to two weeks, or require your own approval.
If it went through anyway
The email address it replaced gets a link that works for 90 days. It removes the new sign-in, restores yours, signs everyone out, and sends the case to our support team.
"Someone already has a Human Pass with my ID"
Tell support. Both sides can be asked to verify the document again, and a senior member of the team decides. If it's yours, it's moved to you.
What support can see
Your account's status and how you sign in, with your email partly hidden. Never your documents, the sites you use, or your IDs on them. Every look is logged.
Questions
Good questions to ask.
Why do I need to show an ID just to prove I'm a person?
Because the point is one person, one account. Bots can pass a CAPTCHA, and anyone can make another email address. A government ID is something most people have exactly one of, which is what lets a site trust that two accounts aren't the same person. Your ID is checked once; the site never sees it.
Can the site find out who I am?
Not from Human Pass. The site gets a yes and an ID that only means something on that site. Of course, anything you tell the site yourself, like a username or profile photo, is up to you.
Can two sites work out that I'm the same person?
Not from Human Pass. Each site gets a different ID for you, and the IDs can't be matched up without our secret keys.
Can I have two Human Passes?
No. If you verify again with the same ID, you get back your existing Human Pass, with the same ID on every site. That's what makes "one person, one account" work for the sites you use.
What happens when I delete my Human Pass?
Your sign-ins and email are deleted and sites are told the account is gone. The one-way fingerprint of your ID is kept for a limited time (currently planned as 24 months), so deleting and starting again can't be used to dodge a ban. If you verify the same ID within that time, you get your old Human Pass back. After that, the fingerprint is deleted too.
Could Human Pass's IDs ever change?
Only if we ever had to replace a security key. Sites are told the old and new ID together, so your accounts carry on as normal.
I don't have a government ID.
For now, Human Pass needs one. We know that leaves some people out, and we plan to accept more ways to verify over time.
How do I contact support?
From your account's Help page, or from the help link on any Human Pass sign-in page, which works even when you can't sign in.