Sold by: Privado ID
Deployed on AWS
AWS Free Tier
Passwordless, privacy-preserving login for mobile application. A lightweight verifier backend that verifies Privado ID decentralized-identity (DID) zero-knowledge proofs off-chain and returns an app session token from mobile clients.
Overview
Privado ID ZK Login is a verifier backend for passwordless authentication using Privado ID (iden3) decentralized identity (DID) and zero-knowledge proofs. The mobile app embeds the PrivadoMobileSDK and generates a zero-knowledge proof on the device. The backend verifies that proof off-chain with fullVerify, maps the identity to an account, and issues a signed application session token. User credentials never leave the device: AWS receives only the ZK proof (JWZ) and the user's DID or nullifier.
Key capabilities:
- Passwordless login with privacy by design: no passwords, no shared secrets, and no credential storage on the server. The verifier receives only a cryptographic proof that a condition holds, not the underlying personal data.
- Off-chain verification: validates the JWZ and auth proof, each requested proof in scope, the match with the stored auth request, and the user's and issuer's identity state, with tolerance for very recent state changes.
- Read-only blockchain access: the backend only reads identity state via an RPC provider to confirm the user's and issuer's state. No transactions, no gas, and the issuer takes no part in verification.
- Serverless and regional: Amazon API Gateway and AWS Lambda, with a three-route flow (sign-in, callback/verify, status).
- Secure by default: data encrypted at rest in Amazon DynamoDB with AWS KMS, configuration in AWS Systems Manager Parameter Store, secrets in AWS Secrets Manager, and session tokens signed with KMS (JWKS).
- Edge protection and observability: AWS WAF rate limiting in front of the API, with Amazon CloudWatch logs and AWS X-Ray tracing.
How it works:
- The app requests a login (GET /sign-in). The backend stores a pending, single-use auth request with an expiry.
- The app shows consent, builds the ZK proof on the device and submits the JWZ (POST /callback).
- The backend claims the session, reads identity state (read-only RPC), fetches schemas, maps the account, creates the app session and records the result.
- The app polls status (GET /status). The backend returns the result once and signs the session token with KMS.
- On success the app stores the token securely (Keychain/Keystore). On failure it
Highlights
- Passwordless, privacy-first login: user credentials stay on the device and AWS verifies only a zero-knowledge proof (DID or nullifier), never passwords or personal data.
- Secure and private by design: Amazon API Gateway and AWS Lambda, with DynamoDB encrypted by
- Off-chain, read-only verification backend checks the zero-knowledge proof and identity state via read-only RPC, with no on-chain transactions, no gas, and no issuer involvement.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimensions summary
This listing has one pricing dimension: Free. You pay nothing to use the native mobile SDK for zero-knowledge authentication. There are no tiers, usage add-ons, or instance sizes to choose from. The single Free dimension covers all usage under this listing. The SDK helps you build mobile identity wallets that request, store, and present credentials using zero-knowledge proofs on the user's device. Because there is only one option, pricing does not scale with usage or quantity on AWS Marketplace.
Top-of-mind questions for buyers
The Free dimension covers the native mobile SDK itself, which you use to build identity wallets. The software is open source and free to use. You pay nothing on AWS Marketplace for this listing, with no tiers, seats, or usage meters applied.
This listing bills nothing. The vendor may charge separately for other infrastructure and services, such as per-transaction fees for credential use and a possible one-time fee per new cloud wallet user. Those charges sit outside this free SDK listing and do not appear on this Marketplace bill.
No. The SDK is billed as Free with no per-user or per-transaction metering on this listing. Zero-knowledge proofs are generated on the user's device. Adding more users or more authentications does not change what you pay for this listing.
privado.id
Helpful?
Vendor refund policy
Free
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Support is available via email at support@privado.id .
Buyers can expect assistance with:
- Onboarding, requirements assessment and integration of the PrivadoMobileSDK.
- Integration and configuration of the verifier backend, callback and status endpoints, and of the identity-state (RPC) and schema settings.
- Troubleshooting and training sessions on demand.
- Incident response for the login service.
Response times and support hours are provided during onboarding.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
A powerful transaction processing engine to accelerate your ewallet product development and launch.
VideoSDK is a WebRTC-based audio & video SDK for AWS that enables scalable real-time calling, live streaming, recording, and AI-powered collaboration inside your app.
Privado helps enterprises mitigate privacy breaches and associated fines by scanning code hosted in cloud and on-premises repositories for privacy violations. It helps identify and monitor data flow & data usage, create real-time data maps, alert developers of potential breaches to third parties, and create privacy reports.
AppBind is a Zero-trust Device and SIM binding solution designed to provide advanced, adaptive protection for mobile applications. Built as an easy-to-plug SDK for Android and iOS, it leverages proprietary technologies to create unique digital identities, eliminate identity theft, and prevent sophisticated frauds such as SMS spoofing.
The solution ensures seamless regulatory compliance while delivering an enhanced user experience through a single platform that orchestrates multiple touchpoints, including mobile apps, APIs, and SMS gateways
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.