NEW
Report & API Now Live! Data insights report and open data API endpoints live as of September 23, 2025

Description −

Description
Source

Blockstack DID Method is a decentralized identity system built on the Blockstack Network's decentralized naming layer. The method leverages blockchain technology to bind human-readable usernames to public keys and data storage pointers.

Key aspects:

  • Uses a decentralized naming system as foundation for DIDs
  • Blockchain-agnostic design allows migration between chains
  • Currently operates on the Bitcoin blockchain
  • Supports both on-chain and off-chain DIDs
  • Provides human-readable names mapped to DIDs

The method features:

  • Global uniqueness of identifiers
  • Cryptographic ownership through public/private key pairs
  • Decentralized resolution through the Blockstack Network
  • Portable architecture that can migrate between blockchains
  • Flexible storage options for DID Documents (DDOs)

Technical Structure:

  • Method identifier: did:stack
  • Format: did:stack:v0:<address>-<index>
  • Address: base58check encoding of public key hash
  • Index: monotonically increasing integer for multiple DIDs per address

Core Operations:

  1. DID Creation:

    • Requires registering a name (on-chain or off-chain)
    • Uses NAME_PREORDER and NAME_REGISTRATION transactions
    • Generates unique DID based on address and index
  2. DID Resolution:

    • Translates DIDs to names and vice versa
    • Returns authenticated DDO through JSON Web Token
    • Validates signatures using secp256k1 keys
  3. DID Updates:

    • Supports key rotation through NAME_TRANSFER
    • Allows DDO updates through storage location changes
    • Implements NAME_UPDATE for zone file modifications
  4. DID Deletion:

    • Uses NAME_REVOKE transaction
    • Supports both on-chain and off-chain revocation

Security Features:

  • Blockchain-based anchoring
  • Cryptographic authentication of DDOs
  • Decentralized peer network for data distribution
  • Replay attack prevention through blockchain anchoring
  • Storage provider flexibility for DDO hosting

The method implements the following standards:

  • W3C DID Core Specification
  • secp256k1 cryptography
  • JSON Web Tokens
  • DNS zone file format

Projects compatible with, endorsing or using this DID Method −

Compatible DLT Instances −

DLT Instance
Operator
Source

Entities maintaining or authoring this DID Method −

Persons associated with this DID Method −

If you are featured in the Web of Trust Map and wish to exercise your GDPR rights, including the right to be forgotten, visit the privacy policy page