Self-Sovereign Identity Solutions

SolMail implements self-sovereign identity at the protocol level by making every Solana wallet address a valid, operator-independent inbox by default. Users can extend this with Solana Name Service handles, .mail domains, or email-style addresses — all minted as on-chain NFTs that are tradable and explicitly not revocable by any operator. This design ensures that identity ownership remains entirely in the hands of the user rather than any centralized service provider. The identity layer anchors the broader SolMail architecture: end-to-end encrypted messaging via ElGamal cryptography, file attachments stored through Irys decentralized storage, and the Fusion NFT mail format that embeds payments and contracts inside messages. Because addresses are on-chain assets, SolMail identities can serve as SSO credentials across Solana dApps and as the authentication layer for programmable Web3 workflows. The protocol explicitly positions these self-sovereign identities as a potential identity primitive for the Solana ecosystem.

SollPay replaces the traditional seed phrase with a self-sovereign identity model built on zero-knowledge proofs and Solana account abstraction. At signup, a user's phone number or email is hashed with the Poseidon algorithm to create a unique, privacy-preserving identifier, which is verified on-chain without exposing the underlying contact information. Private keys live exclusively in device-level secure hardware and are never held by SollPay or any third party. Three custom on-chain programs — a Wallet Factory, a Wallet Program, and an Administration Program — manage wallet creation, transaction processing, and the mapping from hashed identifiers to wallet addresses. Recovery on a new device follows a ZK re-authentication flow rather than requiring a mnemonic backup. This architecture allows users to maintain genuine self-custody while accessing their wallet with the same credentials used for everyday applications.

Unruggable gives Solana users a self-sovereign key custody solution designed around Solana's account model and transaction structure. Private keys are generated and stored offline in the hardware device, never exposed to internet-connected software, and controlled entirely by the user through physical interaction. General-purpose hardware wallets treat Solana as one of many chains; Unruggable is built exclusively for Solana users from the ground up. The companion app extends self-custody into the broader Solana ecosystem. Squads multisig is built directly into the app, letting users require multiple signers before any transaction proceeds and eliminating single points of failure. Solana Name Service integration provides human-readable address resolution within the secure environment. The open-source firmware and app give users full auditability over every layer of their key management stack.

3NS builds decentralized identity into every .Web3 domain through a DID (decentralized identifier) record anchored to each registration. The Agent Domain Protocol specifies that each domain carries its own DID alongside registry and resolver contract addresses per supported chain, making identity portable and verifiable across blockchains including Solana, Ethereum, and Polygon. This design enables autonomous agents to authenticate with one another without relying on a centralized directory. Domains accumulate reputation scores and verifiable credentials based on performance metrics, providing trust signals for agent-to-agent interactions. On-chain governance contracts with versioning and rollback capabilities allow domain owners and collective token holders to manage and update identity configuration transparently. The MIT-licensed Agent Domain Protocol specification defines how these identities are structured, published, and discovered across participating networks.

Quidli's identity protocol treats existing Web 2.0 accounts — GitHub, X, Farcaster, Discord, LinkedIn — as verifiable anchors for user-controlled wallet addresses, without centralizing personal data on a platform's servers. The Connect API maps these social identities to Ethereum and Solana wallets simultaneously, enabling cross-chain address resolution from a single handle while leaving full custody with the user. The project's stated mission is to transform social accounts into identity primitives that span applications without locking users into a Quidli-specific interface. For first-time recipients, Quidli generates a non-custodial wallet automatically and holds tokens until the user authenticates with their social account to claim. The connect-mcp package extends this model into AI agent frameworks, letting autonomous agents resolve and verify human identities at machine speed without manual address exchange or centralized registries. Founded in 2018 and backed by SOSV's dlab accelerator, Quidli has evolved from a team incentive tool into identity infrastructure serving Solana's growing ecosystem of DAOs, consumer apps, and agentic protocols.

NGRAVE was built around a foundational premise: that self-sovereign custody of digital assets requires hardware specifically designed for that purpose, not adapted from general-purpose components. The company's flagship product, the NGRAVE ZERO, holds the highest security certification ever awarded to a consumer financial product — Common Criteria EAL7 — achieved because its custom operating system was designed from scratch and evaluated by an accredited laboratory under the same framework used by European defense systems. The private key generated on the ZERO never leaves the device, is never transmitted over any network connection, and is never accessible to NGRAVE as a company. Custody is enforced at the hardware level, not by terms of service. The self-sovereign model extends to every layer of the device's communication design. The ZERO carries no USB data transfer capability, no Bluetooth, no NFC, and no WiFi — transaction signing occurs entirely offline, with the only external interface being QR codes scanned through the device's built-in camera. Users interact with the NGRAVE LIQUID mobile app to initiate and broadcast transactions, but the app never accesses private key material. For Solana users, SOL address derivation happens directly on the ZERO to preserve the air-gapped guarantee even at the address generation stage. The architecture is an explicit rejection of any security model where a user's custody depends on a third party's operational integrity.

t54's Know Your Agent (KYA) framework is one of the first identity verification systems designed specifically for AI agents, rewriting KYC and KYB compliance logic for machine counterparties that carry none of the conventional signals — no biometrics, no legal personhood, no behavioral history — that traditional systems interrogate. KYA profiles cover developer verification, model provenance, human-agent binding, and intent attestation, producing a durable identity credential presented at transaction time. These verified credentials underpin both t54's Trustline underwriting engine and its x402-Secure payment SDK, meaning institutions and developers building on t54's stack also inherit a machine-native identity layer. KYA was built to satisfy regulators beginning to ask who bears responsibility when autonomous financial agents act incorrectly, and has been applied to verify over 41,000 agents across t54's platform.

Humanship ID is a privacy-first human identity layer on Solana that lets users prove they are real, unique individuals without surrendering personal data to any platform, protocol, or third party. The protocol inverts the conventional identity model, issuing proofs that users hold and present selectively rather than storing credentials with a centralised custodian—delivering exactly the self-sovereign premise that individuals control their own identity data. DeFi protocols, governance systems, and NFT platforms can compose on top of Humanship ID to confirm a user is human and unique without learning who that user actually is. Built natively for Solana's high throughput and low fees, the project placed fifth in the Solana Cypherpunk Hackathon's Undefined Track in 2025, earning a $25,000 USDC prize and broad ecosystem recognition as foundational identity infrastructure.

PlaiPin's Inter-Companion Protocol (PICP) assigns each physical device a decentralized digital identity (DID) anchored on Solana, giving every companion a verifiable on-chain identity that does not depend on centralized servers or platform accounts. When two PlaiPin companions come into physical proximity, PICP performs consented device discovery and mutual authentication using these DIDs before enabling any data exchange or value transfer, ensuring interactions are grounded in verifiable identity. This architecture allows agent-to-agent transactions to proceed autonomously based on proximity awareness rather than centralized intermediation, with each device's identity persisting across sessions and interactions regardless of which physical skin is attached. PICP is designed as an open framework, meaning third-party developers can build custom exchange logic on top of the protocol while relying on the same decentralized identity substrate for authentication.

cherry.fun builds a self-sovereign identity layer for social communication on Solana, where a user's Solana wallet public key is the sole account identifier. There is no dependency on phone numbers, email addresses, or centralized accounts — wallet ownership is the complete and exclusive basis for platform access. Users register on-chain through the STEM protocol, with channel access established by wallet public key invitation and mutual acceptance. This architecture means users carry their identity and all associated memberships — DMs, Clubs, and mini app access — across web and mobile surfaces without generating new credentials. The open-source stem-sdk and chat-embed-sdk extend the same wallet-native identity model to other Solana builders, so applications embedding cherry.fun inherit the SSI approach by default. STEM is published as a public protocol contribution under the cherrydotfun GitHub organization.

Nabox centers its architecture on NaboxID, a decentralized identity layer built on asymmetric cryptography. Rather than separate seed phrases per blockchain, NaboxID derives one unified identity controlling addresses on Ethereum, BNB Chain, Solana, TRON, NULS, and dozens of other networks. This makes Nabox a genuine cross-chain identity manager serving over 500000 active users across 100 countries. The DID mechanism keeps keys exclusively on the user device, never transmitting them to Nabox servers. Originally incubated by the NULS Foundation in 2018, the platform now supports more than 50000 digital assets under a single NaboxID, and its open-source repository reflects a practical self-sovereign identity deployment at consumer scale.