Abstract: Techniques are described for providing delegated access to identity data stored on distributed ledger(s), in which the identity data can include image(s) of physical credential(s) and/or biometric data used to identify individual(s). An application programming interface (API) enables access to the identity data. In some instances, the access is provided to an obfuscated version of the identity data and/or to a hash or other digest of the identity data. The identity data is provided by the API according to the individual's delegation. The individual can specify rules that indicate the particular types of identity data that may be provided and/or used for particular purposes, and/or the particular entities authorized to request the identity data.

Abstract: Each of multiple computing devices of a user is registered by obtaining therefrom identifying indicia, obtaining from the user a device-specific password for the computing device, and storing the obtained identifying indicia and device-specific password for the computing device in an entry for the user in a credentials database. The user requests access to a restricted service by way of a particular one of the multiple computing devices with credentials including the device-specific password for the particular computing device, and identifying indicia are obtained therefrom. The obtained identifying indicia and the device-specific password of the particular computing device appear in the entry, and the user is thus granted access to the restricted service.