Bhutan's Ethereum-Linked Digital ID Verifies Credentials Off-Chain

Bhutan's National Digital Identity programme verifies citizens' credentials through an Ethereum-linked registry while keeping all sensitive personal data off the public blockchain. The system, described by the foundation behind the work as a functioning deployment rather than an experiment, stores credentials in individual wallets and uses the registry solely to confirm their authenticity.

The design separates two functions that conventional identity databases combine. Trusted institutions determine which organisations may issue credentials, and the Ethereum-linked registry lets participating systems verify that a presented credential is genuine. The passport numbers, health records and other personal details never reside on-chain.

How does the Bhutanese model work in practice?

Citizens hold credentials in a personal wallet and choose what information to disclose when accessing a service. The foundation frames this as a practical, working identity deployment — in contrast to its humanitarian coordination work, which remains at the proof-of-concept stage.

The foundation's central argument concerns control over public infrastructure. Open-source systems that are broadly accessible, it says, can lessen reliance on a single technology provider and support sovereignty. Public institutions would still determine which credentials they accept, while individuals gain more control over the information they disclose.

Personal control is paired with a common verification mechanism. Yet the operating demands of running an identity service stay the same: local laws, device access, trusted issuers, and recovery options for citizens who lose credentials or lack smartphones all still require solutions.

What does the humanitarian proof of concept propose?

The foundation's humanitarian initiative is experimental, not a deployed aid programme. It examines how organisations serving the same populations could coordinate assistance delivery without extensively sharing personal data.

The foundation's Technical Foundations team studied a model combining decentralised identity with private payment mechanisms. The aim is to let agencies check relevant facts, avoid duplicated assistance and coordinate distribution without handing a central operator their complete files. The foundation presented the work as a proof of concept, maintaining a clear distinction between that exploration and Bhutan's operating credential system.

Why does verification still need legal safeguards?

Open infrastructure supplies a verification layer, not a replacement for the rules governing access, data retention and individual rights. Application design still determines what information a service collects and who can see it, regardless of the underlying network.

The sovereignty argument therefore extends beyond the choice of Ethereum as a network. The proposed approach retains institutions' authority over valid credentials while giving citizens greater control over disclosure; the blockchain supplies verification rather than a public repository of personal information.

The foundation argues that evaluation of such systems should rest not on claims about Ethereum adoption but on implementation studies, independent audits and measurable outcomes for citizens. For governments weighing similar infrastructure, that standard — audited deployments with citizen-level results — is likely to become the benchmark against which blockchain-linked identity programmes are judged as the technology matures.