IPS ID Wallet vs Titanium Passkey

The ID Wallet app allows you to store and manage secure, authenticated, fully functional digital identity credentials. Apply for or register to receive a reusable digital credential (verifiable credential) either remotely or in-person, after which you can access the secure credential and share selected identity attributes online or in-person to prove your identity. Key Features: • Multi-credential management (wallet) with customized onboarding workflow for each credential. • Privacy-preserving technology—personal identity attributes are not stored in the Cloud, but on the user’s device, secured by device biometrics. • Consent confirmation for all data sharing with requested attributes listed and user consent to share requested. • Fast registration and identity proofing ◦ Document scanning extracts data from the scanned document. ◦ Accurate selfie-matching with certified liveness detection. • Syncing of identity data and status with data held by the issuing authority. • Custom messaging from issuing authority or gateway partner both at the time of attribute updates and status updates, or as needed. • Both in-person and online identity verification ◦ In-person with transaction-driven data sharing. ◦ Online (web and mobile app) with transaction-driven data sharing from both end-user and gateway-triggered experiences. • Transaction activity log with history to track the types of attributes shared by the user (not the data itself) in each transaction with a relying party (the organization owning the website, web application, or mobile application that the end-user wants to access). • NFC Scan & MRZ Scanning for ICAO Documents: Utilizes NFC and Machine-Readable Zone (MRZ) scanning for verification of ICAO-compliant documents. App Functions: • Document Authentication with Selfie Validation ◦ Scan any supported identity document ◦ Validate the selfie against the document portrait • NFC Passport Scanning with Selfie Validation ◦ Scan your NFC passport ◦ Validate the selfie against the document portrait • NFC Identity Card with Selfie Validation ◦ Scan your NFC identity card ◦ Validate the selfie against the document portrait • Quick In-person sharing option ◦ Enable quick trigger of ISO18013-5 presentment • Online QR code scanning ◦ Scan option for online authentication • In-person presentment with ID Verify app ◦ ISO 18013-5 compliant device-to-device transfer ◦ Requests full ISO 23220-4 photo ID content • OpenID connect (OIDC) compliant authentication transaction for verifying parties • Ad hoc notification ◦ Allows issuers to communicate with the end-user • Credential lifecycle can be managed by customer through a Rest API • Supported operations ◦ Suspend: Credential is suspended from being used for presentment. ◦ Resume/Reinstate: Credential is reinstated and can be used again for presentment. ◦ Revoke: Credential is removed from the device ◦ Attribute Updates: Add/modify any identity attribute to update credential.

Titanium Passkey is an offline FIDO2 / WebAuthn credential provider for iPhone, iPad, and Mac. Every private key lives inside the Secure Enclave and never leaves it. Every sign-in is gated by Face ID or Touch ID, enforced in hardware. WHY TITANIUM PASSKEY? • Passkeys bound to silicon — never replicated to a vendor cloud you don't control • No account, no sign-up, no subscription — install and use • Works with every passkey-capable site: GitHub, Google, your bank, self-hosted apps • A stolen phone signs nothing — biometric enrollment gates the private key at the hardware level • Zero telemetry, zero analytics, zero tracking SDKs in the binary • Sign in on any desktop — Windows, Mac, Linux, Chromebook. On the browser's passkey prompt, choose "Use a Device Nearby" / "Other Options" and scan the QR code with your iPhone. Your phone stays the authenticator; the desktop never sees your key. HOW IT WORKS Enable Titanium Passkey under Settings → Passwords → Use Passwords and Passkeys from. When a site requests a passkey, iOS routes the challenge to the extension. The extension wakes, Face ID or Touch ID unlocks the key inside the Secure Enclave, the assertion is signed on-chip, and handed back. You're signed in. WEBAUTHN SUPPORT • ES256 (COSE -7) over WebAuthn — the baseline every passkey-capable site supports • PRF extension (hmac-secret) for encrypted data binding • Conditional mediation — silently offer passkey sign-in without interrupting the user • Fast authentication — skip the picker when only one passkey matches STORAGE & KEYS • EC P-256 keys created with kSecAttrTokenIDSecureEnclave — not extractable by the app, iOS, or Apple • Gated by biometryCurrentSet + privateKeyUsage — re-enrolling Face ID invalidates keys • Keychain marked AfterFirstUnlockThisDeviceOnly — excluded from iCloud, iTunes, and Finder backups • Optional multi-device tier for iCloud Keychain sync, off by default, trade-offs explained in-app PRIVACY • The Credential Provider extension has no network entitlement — it cannot reach the internet • No account, no email, no cloud • No telemetry, no analytics, no ad identifiers • Attestation uses the 'none' format — we don't uniquely identify your device to relying parties • Anonymous crash reports only if you've opted in via iOS Settings No subscriptions. No in-app purchases. Just passkeys, bound to silicon.