EIP-4361 (SIWE)

Estándar de Contrato Inteligente

Sign-In with Ethereum standard enabling Ethereum accounts to authenticate with off-chain services via a structured, human-readable signed message, replacing OAuth/social login with user-controlled cryptographic identity.

Estándar Abierto

Enlaces

Visitar Comunidad

Detalles

Licencia

https://github.com/spruceid/siwe

Estado de Desarrollo 🏁 Final

Detalle del Estado de Desarrollo

Final

Propietario

SpruceID (Spruce Systems, Inc.)

Órgano de Gobierno Ethereum EIP/ERC process (Final) | Company-controlled (SpruceID as author and principal maintainer)

País

United States

Año de Inicio 2021

Stack

Language-agnostic message format (plain text + EIP-191 signing); reference implementations in TypeScript, Rust, Go, Python, Elixir, Ruby

Financiamiento

SpruceID (company-funded); Ethereum Foundation ecosystem support

Última Investigación 9 mar 2026

Dominios de Caso de Uso

Identidad y Confianza

Capacidades

Identidad soberana

Estándar de Contrato Inteligente Atributos

Orígenes

Developed by SpruceID in collaboration with Ethereum Magicians community; motivated by the problem of centralized identity providers (Google, Facebook) controlling user authentication; enables ENS and Ethereum wallets as identity layer for web services.

Formatos de Datos

Plain text SIWE message format (ABNF-specified); EIP-712 structured data optional; JSON for session metadata; domain, nonce, chain-id, URI as required fields

Términos

CC0

Fondos

Unknown (SpruceID is venture-backed; no public round size for SIWE development specifically)

Basado En

ERC-191 (signed data standard); EIP-712 (typed structured data signing); ENS for human-readable identity layer

Permisos

Permissionless; any dapp or service may implement SIWE; no central authority

Herramientas de Desarrollo

siwe npm package (TypeScript), siwe-rs (Rust), siwe-go (Go), siwe-py (Python); MetaMask native integration via MIP-0003; WalletConnect support; Auth0 SIWE plugin

Madurez del Protocolo / Estandarización

Final EIP; 3M+ library downloads; integrated into MetaMask, WalletConnect, Auth0; widely adopted in Web3 authentication flows

Marco de Confianza

Cryptographic: wallet signature verification via EIP-191; nonce-based replay prevention; domain binding prevents cross-site forgery; session expiry via timestamp fields

Dominio de Aplicación Objetivo

Web3 authentication, DAO gating, token-gated content, decentralized social platforms, civic identity, data vault access control

Modelo de Despliegue

Off-chain message signing + on-chain address verification; no contract deployment required for basic auth; optional ERC-1271 for smart contract wallet support

Tipo de Estándar

Identity Standard

Ecosistema

Ethereum (chain-agnostic message format; chain-id field enables multi-chain adaptation)