Credential Workbench · T545

SD-JWT Disclosure Workbench

Issue a Selective Disclosure JWT (RFC 9901) with per-claim disclosure toggles, or paste any SD-JWT to build a redacted presentation with an optional holder-binding KB-JWT. The what-the-verifier-sees panel shows exactly the disclosed subset a relying party would receive.

SD-JWT · RFC 9901 KB-JWT holder binding Zero PII Client-Side
🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
⚠ A verified SD-JWT proves the disclosed claims were issued and are unaltered, and (with a valid KB-JWT) that the presenter holds the bound key. It is not, by itself, identity assurance: keys are self-asserted unless separately anchored. See the credential workbench guide.
Claims & Disclosure Toggles
Claim keyValueSelectively disclosable
Issued SD-JWT (issuer copy, all disclosures attached)
Always-disclosed payload / disclosures
Selectively disclosable
Paste SD-JWT
Presentation (redacted SD-JWT + optional KB-JWT)
What the verifier sees
OCG Receipt of the Presentation Activity