Let’s talk about the app your government is building that is about to hold the keys to your entire identity.
There is this moment everyone over a certain age remembers. The counter. The queue. The stack of documents. ID book, driver’s licence, proof of address, the bank card, the medical aid card, the folded paper you keep because some official might ask for it. Identity used to be a pile of things you physically carried. You decided what to show. You decided when to put it away.
That is the old world. This is the new one: an app.
In the European Union, the most serious identity infrastructure project ever attempted is moving from pilot to rollout. eIDAS 2.0 — the regulation adopted in 2024 — obliges member states to put a European Digital Identity Wallet in citizens’ hands. One app that holds your ID, your driving licence, your qualifications, your bank details, your medical credentials. One app you use to prove who you are to any government, any bank, any employer, any platform across twenty-seven countries.
The rollouts are arriving this year. This is not a white paper anymore. It is infrastructure with a launch date.
Now, here’s why it matters. Identity is becoming infrastructure — we’ve said that in this series until we’re hoarse, and this is the moment it stops being a phrase. The institution that issues the key to every door gets to watch every door you open. Every login, every verification, every transaction passes through the same layer that authenticates you. In the old world, your papers sat in your pocket and nobody knew where you took them. In the new world, the wallet knows. The question is who built it, and what they are allowed to do with that knowledge.
But here’s what people are missing.
The first thing: the underlying design is actually good — and it matters that we say so out loud. The wallet is built around selective disclosure. You can prove you are over eighteen without revealing your date of birth. You can prove you hold a licence without showing your address. Proof without exposure. That is the exact principle this series keeps defending, and here it is, written into law and going into production. When the architecture is right, you do not hand over your whole life to prove one fact.
But the architecture only protects you if the thing in your hand is actually yours.
The second thing people are missing: the honeypot. One standardised identity layer covering hundreds of millions of people is the most valuable database ever assembled. And we just watched the companion vaults teach us the rule: anything that valuable, at that scale, eventually gets attacked. Not maybe. Eventually. The question is never whether the treasure room gets raided. The question is what happens to you when it does.
And the third thing — the one nobody in Brussels wants to say — is the revocation question. Who holds the off switch? If the state can suspend your wallet, it can suspend your access to your bank, your licence, your right to work, in a single action. A key you do not control is not a key. It is a leash.
So here is the operator lesson buried in the rollout. Every bank, every employer, every platform in Europe is going to bolt onto this layer — because it is free identity verification with government-grade assurance, and that is irresistible. The standards being set this year, verifiable credentials, selective disclosure, are the rails everything else will ride on for the next decade. If you build identity or consent infrastructure, build for these rails, not against them. And if you are just a person with a phone, ask the questions that decide everything: can I show less? Can I take it back? Can I walk away without losing the things I need to live?
The wallet is not the enemy. The wallet is the test. It could be the best thing that ever happened to digital identity: proof you hold, shown on your terms, revocable, auditable. Or it could be the most complete surveillance architecture ever built — with your thumbprint on the door. The difference is not the technology. The difference is who holds the off switch, and what the law does when they use it.
Identity used to be a pile of papers in your pocket, and you decided what to show. Then the machine age turned it into a profile you could not see. This is the one real chance to make it a key in your hand instead. Watch what they build. And if they build a leash, say the word out loud.
Because the wallet is coming either way. The only question left is whether it opens doors for you — or locks them behind you.