BrightID

Identity System / Design

A privacy-first social identity network proposing a novel approach to proof-of-uniqueness: each person builds a social graph of connections with people who know them, and Sybil resistance is achieved by analyzing that graph rather than via government ID, biometrics, or centralized verification. Fake identities are detected algorithmically by examining the structure of the connection graph using tools like SybilRank and the Aura algorithm. Applications integrate BrightID to ensure each user holds only one account, enabling fair access to public goods, quadratic voting, and community resources.

Community
Links
Visit Community

Details

License Permissive / Open source; https://github.com/BrightID — multiple repos including BrightID mobile app, BrightID-Node, Aura frontend, Python SDK, smart contract templates
Dev Status 🟢 Active
Dev Status Detail Released (mobile app live on iOS and Android; 70K+ sponsored users; 15+ integrated apps; active development)
Owner BrightID Main LLC (US entity); governed by BrightDAO (Aragon-based DAO on IDChain)
Country USA
Start Year 2020
Stack JavaScript/TypeScript (mobile app — React Native); Python (analysis nodes, SDK); Solidity (on-chain verification smart contracts); Go (IDChain — fork of go-ethereum)
Funding Sponsorships (1 DAI per user lifetime paid by integrating dApps); BrightDAO treasury; BRIGHT token ecosystem; undisclosed grants
Last Investigated Jul 1, 2026

Use Case Domains

Identity & Trust

Identity System / Design Attributes

Origins Decentralized Identity / Public Goods (motivated by need for Sybil resistance in quadratic funding and DAO governance without sacrificing privacy or requiring KYC)
Database IDChain (Ethereum-based PoA blockchain storing connection events and verification results as on-chain transactions); IPFS (off-chain data)
Query Language REST API (BrightID Node API v5 for verification queries by applications)
Data Formats JSON (API responses); signed connection data (cryptographic key pairs); on-chain transaction records on IDChain
Mobile Support Mobile support (iOS and Android native apps — primary interface for creating BrightID, making connections via QR code, receiving verifications)
Web Support Yes (web-based Aura verification app at aura.brightid.org; Sponsorships dashboard at sp.brightid.org; Explorer)
Native Apps Native apps (iOS and Android; primary user interface)
Terms Free (no cost to end users; apps pay 1 DAI sponsorship per user lifetime to fund operations; surplus redistributed to verified users)
Funds Undisclosed; self-sustaining via sponsorship model; BrightDAO governs treasury allocation
Based On Novel architecture — no prior identity standard; informed by social graph analysis research (SybilRank); IDChain built on go-ethereum; Aragon for DAO governance
Authentication & Identity Social graph web-of-trust (identity established through real-world and online connection parties; connections are cryptographically signed with user private keys; no personally identifying information stored; verification status derived from graph analysis algorithms)
Storage Model Hybrid (connection graph synchronized via IDChain PoA blockchain — permanent on-chain record of connection events; personal data such as names and photos exchanged only off-chain peer-to-peer and never stored on servers)
Interoperability API integration for any application; BrightID verifications consumable by Ethereum-compatible smart contracts via on-chain verification templates; integrated with Gitcoin, 1Hive, Giveth, Aragon, clr.fund, and others
Data Portability Self-sovereign (users own their identity and connection data via private key; no central authority controls verification status; graph data is public on IDChain for auditability but names/photos are never stored)
Governance & Decision Making BrightDAO (Aragon-based DAO on IDChain; governs budget allocation for development, research, community support; governance rights distributed to dApp and community delegates based on sponsorship metrics)
Identity Standards None (does not implement W3C DID, W3C VC, or other formal identity standards; novel social graph approach operates outside existing identity paradigms)
DID Methods Supported None (no DID method; identity is a BrightID node address derived from user keypair, not a DID)
Key Management User-controlled local keypair (private key generated and stored on mobile device; connections signed with private key; social recovery mechanism available)
Credential Types Proof of Uniqueness (non-transferable; graph-analysis-derived; not a W3C Verifiable Credential — a boolean verification result queryable via API or on-chain)
Verification Method Social graph analysis (SybilRank algorithm; Aura algorithm run by independent verification nodes; multiple verification tiers: Meets, Bitu, Aura — each with different trust thresholds)
Privacy Features No personally identifying information stored; names and photos shared only peer-to-peer off-chain; only connection event hashes stored on IDChain; pseudonymous by design
Authentication Methods QR code scanning (mobile app; users meet in person or online and scan each other's QR codes to form connections); deep link (brightid:// protocol)
Revocation Mechanism No formal revocation (connections can be removed; verification status recalculated dynamically by graph analysis; no time-bound expiration)
Agent Types Supported Humans (individuals only; proof-of-uniqueness is specifically for human personhood)
Wallet/Client Types Mobile app (iOS and Android — primary client); Aura web app (secondary verification layer)
Recovery Mechanisms Social recovery (users designate recovery connections; if device lost, recovery connections can collectively restore access); Device recovery via backup
Compliance / Regulations No formal compliance framework; GDPR-aligned by design (no PII stored on servers); no KYC/AML
Credential Exchange Protocols Custom REST API (BrightID Node v5 API; applications query verification status by Ethereum address); smart contract templates for on-chain verification publishing
Trust Framework Social graph web-of-trust (trust derives from real-world connections and graph analysis; seed groups serve as trusted anchor points; no government-anchored trust)
Cost Model Free to end users; 1 DAI lifetime sponsorship fee paid by integrating applications per user; no per-query fees
Censorship Resistance High (IDChain is a PoA blockchain not controlled by any single entity; BrightID nodes operated by community; graph analysis open source so anyone can run verification; no central server that can be shut down)