How NoirID
keeps you apart
One account sits behind everything, and it is never handed to a website. Each website gets an identifier derived for that website alone, the same every time you return.
Your Noir account
Never released to a website
Website A
Subjectk7f3 92ad 0be1 54c8
Website B
Subjectq1d9 6e07 b3fa 2c71
What a website sees,
and what it does not
A website receives
- A subject made for that website only
- Only the details you agree to share, such as your email address
- Proof that you signed in on NoirID
A website never receives
- Your Noir account itself
- The subjects other websites hold for you
- Your password or passkey: you never enter them on that website
Sign in
in one place only
All of this works today. NoirID is in beta: it runs on our own servers and has not had an external security audit yet.
Passkey first
Sign in with a passkey on your device. A password, an emailed code and an authenticator app stay available as fallbacks.
Always on NoirID
A website sends you to NoirID to sign in, and you come back signed in. No website embeds the sign-in or asks for your Noir password.
Your devices, in view
See where you are signed in, sign a device out, and get back into your account through a checked recovery process.
Where NoirID
is today
NoirID is open in beta. It connects to NoirSystems products first and to other websites after that. Each step starts only once the one before it has passed its checks.
- We are here
Beta
Real Noir accounts on Ory Kratos and Hydra, mature open-source identity engines, instead of protocol code written from scratch.
NoirSystems products
Our own products sign in through NoirID once an external security test finds no unresolved critical or high issues.
Open beta
Opened to other websites once directory isolation, support controls and privacy operations have passed review.
Generally available
After an independent protocol and security review, and months of reliability evidence.
Honest answers
Can I use NoirID today?
Yes, in beta: you can create a Noir account, sign in with a passkey, a password or an emailed code, and manage your devices. Websites connect to it once we have registered them; write to us if you want yours added.
Can two websites work out that I am the same person?
Not from the subject: each website receives a different one. But if both also receive your email address, the email is the link between them. That is why each website should ask for as little as it needs.
Does NoirID decide what I can do on a website?
No. NoirID answers who is signing in and what you agreed to share. What you can do on a website is decided by that website.
What if NoirID is down?
You stay signed in where you already are, because each website keeps its own session. New sign-ins wait until NoirID is back.
Building somethingthat needs sign-in?
Tell us about your product. During the beta we register each website ourselves, so every integration starts with a conversation.