Vidos Now Supports did:webvh: The Next Generation of Verifiable Digital Identity

All Vidos services including Resolver, Verifier, Validator, and Authorizer now support did:webvh, the enhanced did:web with cryptographic audit trails. Adopted by Switzerland for national identity, this production-ready standard ensures credentials remain permanently verifiable. Start using did:webvh across your entire verification workflow today with no code changes.
Published on
September 12, 2025

Vidos Now Supports did:webvh: The Next Generation of Verifiable Digital Identity

We're excited to announce that the Vidos Universal Resolver now supports did:webvh, the latest evolution in decentralized identifier technology that's already powering Switzerland's national digital identity system. This addition strengthens our commitment to providing comprehensive, standards-based identity verification infrastructure for enterprises navigating the rapidly evolving digital identity landscape.

What is did:webvh?

did:webvh (pronounced "did web vee-aitch") stands for "DID Web with Verifiable History." It builds upon the familiar did:web method by adding a cryptographically verifiable audit trail of all changes made to a digital identifier over time. Think of it as did:web with a built-in, tamper-proof changelog that proves exactly how an identity has evolved.

Where traditional did:web identifiers look like did:web:example.com, did:webvh identifiers include a unique cryptographic fingerprint: did:webvh:abc123xyz:example.com. This fingerprint, called a Self-Certifying Identifier (SCID), ensures the identity remains verifiable even if the hosting domain changes or experiences security issues.

Why did:webvh matters for your organization

If you’re evaluating identity verification solutions, you're likely in a product-related role balancing several critical requirements: security, auditability, user experience, and integration complexity. did:webvh addresses each of these concerns:

Enhanced trust through verifiable history

Every update to a did:webvh identifier creates a permanent, cryptographically signed record. This means you can verify not just the current state of a credential, but its entire lifecycle. For KYC processes, this provides an auditable trail showing when and how customer identities were verified. For regulatory compliance, it provides legally admissible evidence of all identity-related actions.

Complete traceability for supply chains

To illustrate, let’s consider tracking premium coffee beans from farm to cup. Each participant in the supply chain has their own did:webvh identifier: the farm, exporter, importer, roaster, and retailer. When they issue credentials about products or shipments, those credentials are cryptographically signed by their DID.

A Colombian farm creates a harvest credential with details about organic certification. An exporter adds shipping credentials with export permits. The UK importer confirms receipt with customs clearance. The roaster adds processing details with batch numbers.

Here's the critical difference: with regular did:web, if the farm's website goes offline or the exporter updates their DID, the verification chain breaks. With did:webvh, the cryptographic history ensures every credential remains permanently verifiable. You can prove the farm was certified organic at harvest time, the exporter was licensed when shipping, and the roaster had valid food safety certifications during processing. This verification remains possible even years later, even if companies change ownership or cease operations.

This unbreakable chain of trust enables authenticity verification, compliance demonstration, efficient recall management, and premium pricing justification through proven provenance.

Real-world validation

Switzerland's selection of did:webvh for their national e-ID system (SWIYU) validates its enterprise readiness. When a nation known for precision and security chooses this technology for citizen identity, it signals maturity beyond experimental protocols. The Government of British Columbia has similarly adopted did:webvh for their digital trust initiatives.

What this means for Vidos customers

Complete verification capabilities today

Starting immediately, you can both resolve and verify credentials from did:webvh issuers with no code changes required. This is crucial: you're not just looking up identifiers, you're validating credentials issued by those identifiers with full cryptographic verification of their history.

Our platform automatically:

  • Resolves did:webvh identifiers to their current DID documents
  • Verifies credentials issued by did:webvh identifiers, checking both signatures and issuer integrity
  • Validates the cryptographic integrity of the entire version history
  • Confirms no tampering has occurred in the identity's evolution
  • Supports historical queries to verify credentials at specific points in time

Full integration across Vidos servicesThe did:webvh support integrates with our complete verification stack, enabling you to verify credentials end-to-end:

  • Vidos Verifier validates credentials issued by did:webvh identifiers, checking both the credential signature and the issuer's complete historical integrity, giving you higher confidence in credential authenticity
  • Vidos Validator applies your business rules to credentials from did:webvh issuers, with additional trust assurance from verifiable history
  • Vidos Authorizer can request credentials from holders using did:webvh identifiers, ensuring verification integrity throughout the entire credential exchange

This means if a university issues a diploma using did:webvh, you can verify not just that the diploma is valid, but that the university's identity and accreditation status were valid when the diploma was issued, even decades later.

Backward compatibility maintained

did:webvh is designed as a proper superset of did:web. This means:

  • Existing did:web identifiers continue working exactly as before
  • Organizations can migrate from did:web to did:webvh at their own pace
  • Systems that only understand did:web can still interact with did:webvh identifiers in "legacy mode"
  • You can start verifying did:webvh credentials immediately while maintaining support for existing did:web credentials

Technical implementation details

For technical teams, here's what you need to know:

Resolution process

When your application calls our Universal Resolver with a did:webvh identifier:

  1. The resolver fetches the did.jsonl file (JSON Lines format) from the specified domain
  2. It verifies the cryptographic hash chain from the first entry to the current version
  3. It validates all digital signatures using the Data Integrity proof standard
  4. It returns the current DID document, with optional access to historical versions

API usage remains unchanged

GET https://api.vidos.id/resolver/1.0/identifiers/did:webvh:abc123xyz:example.com

The response format matches our existing DID resolution responses, maintaining consistency across your integration.

Historical resolution and verification

Need to verify a credential as it existed six months ago? Use the versionTime parameter:

GET https://api.vidos.id/resolver/1.0/identifiers/did:webvh:abc123xyz:example.com?versionTime=2024-07-01T00:00:00Z

When verifying credentials, our Verifier service automatically handles the historical resolution, ensuring the issuer's identity is validated at the time of issuance.

Looking ahead: The future of verifiable identity

The addition of did:webvh to our Universal Resolver represents is another milestone on our journey to support the future of digital identity. As organizations worldwide seek more trustworthy verification methods, did:webvh provides the foundation for:

  • Cross-border credential verification with permanent auditability
  • Long-term credential validity even after issuer changes
  • Supply chain transparency with complete, verifiable audit trails
  • Educational credential verification that survives institutional changes
  • Professional certification tracking across career transitions

Getting started

Your existing Vidos integration already supports did:webvh resolution and credential verification. No action required. To begin working with did:webvh:

  1. Test credential verification using our API with any did:webvh-issued credential
  2. Try resolving did:webvh identifiers to see the enhanced trust information
  3. Review our updated documentation for historical resolution options
  4. Consider whether your organization should issue credentials using did:webvh

For organizations interested in resolving did:webvh identifiers or migrating from did:web, our technical team can provide guidance on implementation strategies.

Resources and documentation

Questions?

Our team is ready to help you understand how did:webvh can enhance your identity verification workflows. Whether you're building supply chain verification, modernizing KYC processes, or implementing professional credentialing, did:webvh provides the verifiable history and trust assurance your stakeholders demand.

Contact our team to discuss your specific use case or schedule a technical deep-dive session.

Weekly newsletter
No spam. Just the latest releases, interesting articles, and exclusive developments in the world of Digital Identity delivered to your inbox.

Want to learn more?
Download our guide:

The Evolution of Digital Identity

As we delve into the history, milestones, case studies, and future directions of digital identity, this guide aims to provide a comprehensive overview of its evolution. Through this exploration, we hope to shed light on the importance of digital identity in shaping our digital futures, preparing us for the next chapter in this ever-evolving narrative.
Dashboard mockup