Sovereign identity protocol

Your identity. Your terms.

OAuth2 rebuilt around sovereign identity. Authenticate with cryptographic proof, choose exactly what to disclose, and keep control of your identity at every step.

See how it works Open playground

Authorization request Verified locally

Identity

ak_vDWA...CjRz

Proof of identity

Keep private

Everything else

Control

Always yours

Signed, not surrendered Ready

No passwords✦ No centralized passkeys✦ No identity silos✦ Only cryptographic consent

A new authorization layer

OAuth2 without identity capture.

01 / PROVE

Authenticate by signing

A unique, time-sensitive challenge proves that you control your identity. Your private key never leaves your wallet.

02 / CHOOSE

Share only what is needed

Review every request and disclose the minimum information required. Consent is explicit, granular, and revocable.

03 / CONNECT

Authorize the application

Applications receive verifiable claims through a familiar OAuth2 flow, without becoming custodians of your identity.

04 / CONTROL

Remain sovereign

One identity can work across services while remaining under your control. No provider can lock you in or impersonate you.

For people

Stop creating accounts. Start carrying identity.

Your identity should move with you, not live in a company database. Gaju Auth turns authentication into a direct agreement between you and the service you choose.