Credential issuance is the process by which a trusted authority creates a verifiable digital credential and delivers it to an individual's digital wallet. It is the first step in a credential's lifecycle, the moment when identity data becomes cryptographically secured, portable, and ready for use.
Who issues credentials?
Trusted organizations serve as issuers. For government-issued credentials, this includes DMVs issuing mobile driver's licenses, vital records offices issuing birth certificates, and municipal agencies issuing local IDs. Beyond government, universities issue digital diplomas, employers issue employee badges, and professional boards issue licenses and certifications.
Each issuer takes responsibility for verifying the information before issuing the credential. For example, A DMV confirms your identity and driving eligibility, and a university confirms your degree completion. This verification is what makes the resulting credential trustworthy.
How does issuance work?
During issuance, the issuer generates the credential data, applies a cryptographic signature using its private key, and delivers the signed credential to the holder's wallet. The signature serves as the issuer's seal of authenticity, proof that the credential truly came from the stated authority.
For mobile driver's licenses, the process also involves device binding. The holder’s device generates a unique cryptographic key protected by hardware-backed security features such as a secure element or trusted execution environment, and the credential is locked to that device key. This ensures the credential can only be used on the specific device where it was issued.
In-person vs. remote issuance
Credentials can be issued through different channels. In-person issuance mirrors traditional workflows, an individual visits a DMV office, presents documents, completes identity verification, and receives the credential on their phone before leaving.
Remote issuance supports individuals who cannot easily reach physical offices. The process uses secure digital workflows, including facial matching (comparing a selfie against DMV records) and liveness detection (confirming the applicant is physically present, not using a photo or mask). Remote issuance expands access for rural and underserved populations while maintaining security through layered checks.
The issuer's responsibility
According to AAMVA guidelines, issuing authorities must ensure accurate, secure provisioning of credentials onto the holder's device and confirm that the wallet and device hardware meet functional and security requirements. Issuers retain authoritative records but do not need to store a copy of the verifiable digital credential itself, the holder's wallet becomes the primary storage location.
Want to keep learning?
Subscribe to our blog.
