FedID
Identity Protocol
Company
Details
License Partially open (JLINC Labs has 54 GitHub repositories, organization members not publicly visible; jlinc-node is a listed public repo for the JLINC protocol; FedID server and libraries documented at fedid.me but access unclear)
Dev Status 🧪 Alpha
Dev Status Detail Alpha / Active development (FedID protocol documented at fedid.me; JLINC DID method specification published at did-spec.jlinc.org; libraries and server implementation documented but source not publicly visible; JLINC Labs has 54 repositories on GitHub, mostly private)
Owner JLINC Labs (co-founded by Jim Fournier, CEO, and Victor Grey, Chief Architect); JLINC Inc was founded as Portable Data Corp in 2015; Oakland, California
Governing Body Company-controlled (JLINC Labs) | None (FedID Servers are independently operated)
Country USA (Oakland, California)
Start Year 2023
Stack Node.js (JLINC reference implementation); containerized server deployment; OIDC-compatible server infrastructure; ActivityPub federation layer
Funding Unfunded / Self-funded (JLINC Labs listed as unfunded on Tracxn; Jim Fournier funded via LinkedIn IPO founder shares; Noolinc Studio fund planned for 2025)
Last Investigated Jan 15, 2026
Identity Protocol Attributes
Origins Decentralized identity / SSO (evolved from JLINC protocol for permissioned data exchange under signed agreements; addresses Fediverse identity portability problem where user identity is tied to a specific server; inspired by solving the OIDC monopoly of Google and Facebook)
Database Federated DID document storage (DID documents replicated across federated FedID servers; each server maintains copies of federated user DIDs)
Query Language N/A (DID resolution via JLINC DID method; OIDC discovery endpoints for service integration)
Data Formats JSON-LD (DID documents following W3C DID v1 context + JLINC v2 context); JWS (JSON Web Signatures for proof); OIDC tokens; ActivityPub JSON-LD for federation
Mobile Support Yes (FedID App on user's device generates and stores private keys; QR code scanning for authentication challenges; designed for mobile-first key management)
Web Support Yes (OIDC-compatible — any website supporting OIDC login can integrate FedID Connect by changing two lines of code; fedid.me documentation site)
Native Apps FedID App (described as device-resident app for key generation, storage, and QR code authentication; platforms not specified)
Terms Commercial (JLINC Labs is a for-profit company; licensing model for enterprise use; clients include EY, KPMG, Dolby, Nestle, Atlassian for JLINC protocol)
Funds Unknown (no documented external funding rounds; Jim Fournier's personal investment from LinkedIn IPO proceeds)
Based On OIDC (OpenID Connect — FIDC is drop-in compatible); ActivityPub (federation of DID documents between servers); JLINC protocol (signed auditable data exchange agreements); W3C DID v1 specification
Permissions Proprietary / Open Protocol — FedID is a service built on JLINC infrastructure without a published OSI-approved open source license. The DID method specification and the FedID protocol walkthrough are openly published, but there is no separate FedID or FIDC specification document, and the primary jlinc-node implementation does not carry a standard OSI license.
Authentication & Identity DID-based with OIDC compatibility: user creates a FedID (user@domain.ext format) and the FedID App generates private keys on device; FedID Server creates a DID document containing public keys; user signs DID with private key; server federates DID to all federated servers; login via QR code challenge instead of passwords
Storage Model Federated replication: DID documents stored on the user's home FedID Server and replicated to all federated FedID Servers; user's private keys stored only on their device(s) via FedID App; JLINC audit records can be stored on designated archive servers (e.g., archive.jlinc.io)
Interoperability High: OIDC-compatible (any OIDC relying party can integrate FIDC by changing two URL lines); ActivityPub federation (interoperates with Mastodon, Lemmy, Threads, and any ActivityPub-compatible software); JLINC protocol for data provenance auditing across services; potential EU regulatory alternative to Google/Facebook OIDC monopoly
Data Portability Core design principle: username persists even if original server disappears, changes domain, blocks user, or shuts down — as long as DID has been federated to at least one other server; user migrates by connecting to any other FedID Server that holds their federated DID; content ownership tracked via JLINC capability delegations
Governance & Decision Making Corporate (JLINC Labs as for-profit company that controls the protocol); FedID Servers are independently operated (similar to Mastodon instance model); no documented community governance structure for the protocol itself
Protocol Maturity / Standardization Community Standard (published did:jlinc method specification, version 2 of 10 January 2025, plus a FedID protocol walkthrough at fedid.me; no separate FedID or FIDC specification document; JLINC protocol backing; not submitted to formal standards body)
Identity Standards W3C DID v1 (https://www.w3.org/ns/did/v1); JLINC DID v2 (https://didspec.jlinc.io/v2/ctx.jsonld); OpenID Connect (OIDC); ActivityPub; W3C Verifiable Credentials (via capability delegations)
Identity Standards - List
DID Methods Supported did:jlinc (format: did:jlinc:fedid.domain.ext:<base64-key>); custom JLINC DID method specification at did-spec.jlinc.org; version 2.0.0 with create, update, revoke record types
DID Methods Supported - List
Key Management Device-resident private keys: FedID App generates key pairs on user's device; public keys published in DID document verificationMethod array; each device gets its own verification method entry (type: 'device') with a controller reference to the user's DID; multiple devices supported via multiple verificationMethod entries; keys are base64-encoded
Credential Types DID documents (JSON-LD representation of user identity with verification methods, services, and capability delegations); OIDC tokens (standard OIDC ID tokens and access tokens); JLINC audit records (cryptographically signed data exchange agreements providing provenance)
Credential Types - List
Verification Method JWS/CT (JSON Web Signature / Controller Verification): DID documents include a proof block with JWS signature, created timestamp, proofPurpose of 'controllerVerification', and reference to the signing device's verification method; QR code challenge-response for login authentication
Privacy Features User-controlled key management (private keys never leave device); JLINC protocol capability delegations enable tracking of data usage and AI training consent; minimal disclosure (OIDC scopes control what information is shared with relying parties); no password storage on servers
Authentication Methods QR code challenge (primary: FedID Server presents QR code, FedID App scans and signs challenge with device private key — replaces passwords entirely); OIDC flows (authorization code flow for relying party integration); device-based key signing
Revocation Mechanism DID document deactivation (deactivated field in DID document, default false); DID version tracking (version field increments with each update, enabling audit trail); device revocation via removal of verificationMethod entries; JLINC DID method supports revoke record type
Agent Types Supported Humans (primary); services (DID document service array lists connected services with types 'login' and 'service'); JLINC-enabled services can act as agents with capability delegations from user's DID; potential for AI agent delegation via JLINC protocol
Wallet/Client Types FedID App (device-resident application for key management and QR code authentication); any OIDC-compatible client (two-line URL change to integrate); Fediverse clients (Mastodon, Lemmy apps can use FedID for login)
Recovery Mechanisms Recovery hash (DID document includes recoveryHash field — a hashed recovery secret for account recovery); federation-based resilience (DID replicated across multiple servers means identity survives individual server failure); device addition (new devices can be authorized via existing device)
Compliance / Regulations GDPR (JLINC protocol specifically designed for GDPR compliance — provides auditable signed agreements governing data exchange; working solution for GDPR since 2018); EU regulatory alternative to Google/Facebook OIDC
Credential Exchange Protocols OIDC / FIDC (FedID Connect is drop-in compatible with standard OIDC flows); ActivityPub (federation of DID documents between servers); JLINC protocol (signed data exchange agreements with cryptographic audit trail)
Credential Exchange Protocols - List
Trust Framework Federated trust: trust anchored in FedID Server operators (similar to email/Mastodon server trust model); JLINC audit records provide cryptographic proof of data exchange agreements; capability delegations enable verifiable chain of data provenance; no blockchain required
Cost Model TBD (JLINC Labs is commercial with enterprise licensing; FedID Server operation costs borne by server operators similar to Mastodon; end-user cost model not documented; JLINC protocol licensing terms not publicly detailed)
Censorship Resistance High (by design): user identity survives original server disappearance, domain changes, user blocking, or server shutdown — as long as DID has been federated to at least one other server; no single point of failure for identity; user can migrate to any federated server
Relationships
How this tool connects to other tools and organizations, from relationships reviewed by the OpenHaven data steward. They describe how projects connect, not how good they are.
- Based on
- Conforms to
- Identifies via
- Speaks protocol
- Interoperates with