SenseCrypt IdP
LaunchedSenseCrypt IdP connects live face checks to your existing identity protocols for passwordless access.
The platformSenseCrypt / System architecture
One core. Many doors.
Product-specific key lifecycles.
SenseCrypt brings electronic identity, signing, passwordless access, selective disclosure, agent authorization and personal security apps onto one cryptographic foundation.
Find your starting point
Find the product for your use case.
Availability is specific to each product. Explore the architecture and deployment requirements before you build.
SenseCrypt eID
AvailableIssue a digital credential that can be checked against its holder, even from a printed QR. Offline use requires a prepared supported verifier and trusted issuer material.
SenseCrypt PKI
AvailableSign and decapsulate with post-quantum keys generated from your live biometric. Public keys are stored; private keys never are.
SenseCrypt ZKP
Design partnershipsProve an age threshold, residency or entitlement while withholding the underlying personal details. SenseCrypt ZKP is open to design partnerships and is not yet generally available.
SenseCrypt KYA
Early accessRecord an AI agent’s human authorizer, scope, permissions and expiry; connected applications must enforce those permissions.
Lume Auth
AvailableKeep authenticator codes, passwords and private notes in Lume Auth. A live face scan unlocks your encrypted vault without a master password. Chat is included: end-to-end encrypted messaging with contact keys bound to enrolled people and a live face scan to open protected conversations.
Why one primitive
Verify without secrets.
00 PKI private keys stored
SenseCrypt checks a live face against a sealed artifact instead of a stored template: a sealed face token in SenseCrypt IdP, a sealed SensePrint in eID, PKI and ZKP. In SenseCrypt PKI, your private signing key is generated for each operation and never saved.
The architecture, in one view
One live person. A family of products.
Four layers, read bottom to top.
Layer 4
Connect to your existing infrastructure
OIDCSAMLFIDO / WebAuthn
Layer 3 · product surfaces
Layer 2 · the SenseCrypt core — availability varies by product
In PKI: your live biometric generates post-quantum key-pairs in memory → face sign or face decapsulate uses the private key → the private key is discarded.
Layer 1 · capture & liveness
A standard camera plus our own presentation-attack detection checks the capture within the method’s evaluated scope.
Biometric-bound, post-quantum, ZK-capable, unlinkable, and person-bound — properties vary across the product family. IdP federation still uses classical cryptography.
One human root
Credentials for people and AI agents.
SenseCrypt credentials are bound to a person, not a device. In SenseCrypt IdP, the target device (a browser, kiosk or shared terminal) needs no enrollment; the phone methods use the enrolled phone, and the licensed webcam method runs on secure terminals on a trusted customer network, because unsecured terminals expose webcam capture to injection attacks. A lost phone is replaced through verified contact and a new device key.
The same human root extends to AI agents. SenseCrypt KYA, in early access, is designed to let a person authorize each agent's certificate, with the consuming application enforcing its scope and expiry.
Evidence
See the full proof inventory See the evidence.
Biometric recognition evaluated in NIST FRTE under Seventh Sense's own name since 2021.
SenseCrypt PKI supports FIPS 203 (ML-KEM) and FIPS 204 (ML-DSA).
Multiple SenseCrypt patent families filed (PCT) and granted.
Public developer documentation at docs.sensecrypt.com.