Who decides who you are?
The question of digital identity sounds dry - until you realize your answer determines whether you can open a bank account, cross a border, sign a contract, or receive a social benefit. In 2026, this question has taken on an unexpectedly sharp political, technical, and philosophical edge: two fundamentally different approaches to digital identity have come face to face.
On one side: the EU Digital Identity Wallet (EUDI Wallet), a state-mandated project requiring all 27 EU member states to issue every citizen and resident a digital identity wallet by December 2026. On the other: Decentralized Identifiers (DID), a W3C standard born in the cryptographic underground of Web3, which matured by spring 2026 into a full technical specification (Candidate Recommendation v1.1, March 2026).
This is not merely a competition between technologies. It is a collision between two philosophies about who owns your identity.
What DID actually is - and why it's not just a "crypto passport"
Anatomy of a decentralized identifier
A DID is a string like did:example:123456789abcdefghi. It looks like a URL but works on entirely different principles. An ordinary URL points to a server that someone else controls. A DID resolves through a distributed network - a blockchain, IPFS, or another registry - and returns a DID Document: a set of cryptographic keys and service endpoints belonging exclusively to the holder.
Key properties:
- Self-sovereignty - no one except the holder of the private key can modify or revoke the identifier
- Verifiability without intermediaries - authentication happens cryptographically, with no call to a central server
- Selective disclosure - you can prove you are over 18 without revealing your date of birth
- Interoperability - the W3C standard works across any blockchain or registry
Real numbers in 2026
According to open registry data, by April 2026 more than 45 million active DIDs have been registered globally, growing at over 15% per month. More importantly, DIDs have moved well beyond the crypto community. They are now used by:
- Banks - for KYC without handing documents to third parties
- Airlines - for passenger verification without centralized databases
- Employers - for instant diploma and certificate checks
- Healthcare - for accessing medical records without disclosing full histories
J.P. Morgan, in its Kinexys research paper (2025), explicitly calls decentralized identity "the next logical step after asset tokenization" - if money can live on a blockchain, identity should follow.
The technical ecosystem: not a monolith but a jungle
One of DID's persistent problems is fragmentation. Dozens of DID methods exist: did:web, did:key, did:ion (Microsoft, over Bitcoin), did:polygon, did:cheqd. Each method is a separate registry with separate resolution logic. The W3C standard defines the format but does not mandate a specific infrastructure.
This is simultaneously a strength and a weakness: flexibility is maximal, but a corporate IT director choosing between a dozen incompatible methods is more likely to walk away from the concept entirely.
EUDI Wallet: the state arrives in your smartphone
What is happening right now
The eIDAS 2 regulation (EU 2024/1183) entered into force on 20 May 2024. It obligates every EU member state to provide citizens with an EU Digital Identity Wallet - a certified application that stores:
- National identity document (passport, ID card)
- Driving licence
- Educational and professional certificates
- Health insurance card
- Qualified electronic signature
The deadline for member states is December 2026. For the private sector (banks, telecoms, transport), mandatory acceptance becomes effective in December 2027.
Where countries stand today
Progress is uneven. According to Signicat and eID Easy monitoring data (May 2026):
- Finland - officially launched through the Digital and Population Data Services Agency, on schedule
- Lithuania - active procurement and testbed environment phase
- Ireland - running public consultations; plan exists, execution lags behind
- Poland - signalling progress through mObywatel system updates
- Most southern member states - significantly behind
The European Commission continues issuing implementing acts in parallel: in January 2026 an act on the verification of Qualified Electronic Attestations of Attributes (QEAA) was adopted. The system is growing more legally solid - and technically heavier.
Architecture: decentralization inside a centralized frame
Here lies the central irony of the EUDI Wallet. Technically, it is built on Verifiable Credentials (the W3C standard that underlies the DID ecosystem) and uses the concept of storing data on the user's device - no central personal data database exists.
Organizationally, however, it is a fundamentally different proposition:
- Trust is established through government-certified issuance authorities
- Credentials can be revoked by a state authority
- Interoperability is bounded by the Architecture Reference Framework (ARF), agreed at EU level
In other words: technically decentralized, politically centralized.
Where they collide - and where they cooperate
Conflict one: privacy vs. traceability
The sharpest debate inside the ARF working group today is privacy vs. traceability.
Web3 advocates argue: if the wallet lets authorities track when and where a citizen presented a document, it is de facto surveillance infrastructure. DID with zero-knowledge proofs (ZK-proofs) resolves this problem - the verifier receives only a yes/no answer to a specific question, learning neither when you arrived nor who you are.
The ARF is attempting to embed unlinkability mechanisms - the ability to use a fresh pseudonym each time a document is presented. But this creates a dilemma for regulators: how do you prevent fraud if every interaction is anonymous?
This is not a technical question. It is a political one.
Conflict two: sovereignty
DID lets anyone create an identifier without any government's permission. This is a radical proposition: a person without papers, a refugee, a citizen of a failed state - all can hold a verifiable digital identity.
The EUDI Wallet, by contrast, is strictly tied to national citizenship or residency. Beyond its borders, nothing. This works perfectly well for most EU citizens, but systematically excludes those who do not fit the framework.
Unexpected cooperation
Contrary to expectations, the conflict is not total. Several technical components of the EUDI Wallet borrow directly from the Web3 stack:
- Verifiable Credentials (VC) - the same W3C standard
- SD-JWT (Selective Disclosure JWT) - a mechanism developed partly by the DID community
- Zero-Knowledge Proofs are under consideration in the ARF as an optional privacy mechanism
Projects like Cheqd and Dock are actively building bridges: they enable the issuance of Verifiable Credentials compatible with both the EUDI Wallet and Web3 wallets. This is not compromise - it is pragmatism.
What this means for businesses and developers
A new legal reality for EU companies
By December 2027, banks, telecoms, transport services, and several other regulated sectors must accept the EUDI Wallet for user identification. This is not optional - it is a regulatory obligation.
Advisors at Arthur Cox are direct: integration planning should start now, not in 2027. Companies waiting for final specifications risk operational failure just months before the deadline.
What to do:
- Audit your current KYC processes - identify what data is genuinely necessary vs. collected "just in case"
- Study the ARF - technical specifications are public, still iterating, but already sufficient to begin architecture work
- Choose an SDK or provider - companies like Gataca, MATTR, and Dock already offer production-ready solutions for working with Verifiable Credentials
- Run a DID pilot - even if you are not obligated to accept Web3 identifiers, understanding how they work will pay dividends when integrating VC-based flows
Opportunities for Web3 developers
The EUDI Wallet is not a threat to Web3 identity. It is an entry point. If 400 million EU citizens receive wallets containing Verifiable Credentials compatible with W3C standards, this creates an enormous audience for Web3 services that know how to work with those standards.
DeFi protocols requiring KYC (a regulatory trend accelerating through 2025-2026) can use the EUDI Wallet as a verification mechanism without storing copies of documents. This reduces compliance overhead while simultaneously increasing user privacy - a rare win-win in regulated finance.
The risks no one is talking about
Failure is not off the table
Researchers at Signicat outline scenarios in which the EUDI Wallet remains unviable:
- Parallel ecosystems - if Apple Wallet, Google Wallet, and banking apps prove more convenient, citizens will simply ignore the government wallet. A wallet that exists but is rarely chosen is, in practical terms, a failure
- Privacy too strict to be useful - paradoxically, excessive anonymity complicates fraud prevention, which may push the financial sector toward alternative solutions
- Member state misalignment - if half of EU countries miss the December 2026 deadline, cross-border interoperability vanishes, and with it the entire point of a unified wallet
DID: the private key problem
The DID ecosystem carries its own existential risks. Losing a private key means losing an identity - with no "Forgot your password?" recovery path. For ordinary users, this remains unacceptable.
Projects are working on solutions: social recovery (a quorum of trusted contacts can restore a key), hardware security modules, biometric binding. But none of these has become a de facto standard.
This is the DID ecosystem's deepest unsolved problem, and it is the main reason adoption among non-technical users remains a challenge despite impressive aggregate numbers.
Epilogue: two worlds, or one?
Ultimately, DID and the EUDI Wallet solve the same problem with different instruments. One approaches it bottom-up - from cryptography toward trust. The other comes top-down, from a government mandate toward technical implementation.
The history of technology teaches that victory rarely belongs to one side alone. Most likely, state-funded wallets will become the mass-market tool for everyday operations, while DID preserves its niche wherever government verification is inappropriate, impossible, or unwanted.
But one thing can be stated with confidence: the question of who controls your digital identity is no longer abstract. In December 2026, it will receive a very concrete answer - for 400 million Europeans.
And for the rest of the world, the debate is only beginning.
This article is based on public sources: Regulation (EU) 2024/1183 (eIDAS 2), W3C DID v1.1 Candidate Recommendation (March 2026), EU Digital Identity Wallet Architecture Reference Framework, Signicat and eID Easy monitoring data (May 2026), J.P. Morgan Kinexys research and The Conversation (April 2026).
