World ID

Definition:

World ID is Worldcoin’s proof-of-personhood protocol that issues a ZK-backed digital identity credential to each user who scans their iris with the Worldcoin Orb — enabling users to prove they are a unique, real human to any integrated application without revealing who they are or linking their on-chain activity across platforms. The key privacy guarantee is that the verification only proves “this person belongs to the set of verified humans” via a ZK membership proof — not which specific human they are.


Why Proof of Personhood Matters

Without proof-of-personhood, Web3 systems face:

  • Sybil attacks — one entity creating many wallets to game airdrop distributions or voting systems
  • Bot manipulation — automated accounts inflating DeFi metrics, skewing governance
  • Spam and abuse — anonymous participation without accountability

World ID addresses Sybil resistance without requiring users to reveal their real-world identity — a novel trade-off between privacy and uniqueness.


How It Works

Step 1 — Iris Scan (Orb)

Users visit an Orb operator location (a physical device made by Worldcoin) and have their iris scanned. The Orb computes an “IrisCode” — a numerical hash of the iris pattern.

Step 2 — Uniqueness Check

The IrisCode is compared against all previously registered IrisCodes to detect duplicates. If the user has not registered before, they are assigned a new identity.

Step 3 — Semaphore Commitment

The user’s World App generates a Semaphore identity commitment (a ZK-protocol identity). This commitment (not the IrisCode) is added to a globally maintained Semaphore Merkle tree.

Step 4 — ZK Membership Proof

When an application asks “are you a verified human?”, the user’s wallet generates a ZK proof that their identity is included in the Semaphore Merkle tree — without revealing which leaf (which identity) they are.

Off-chain biometrics:

The IrisCode itself is NOT stored on-chain. Worldcoin stores it on their secure servers to enable uniqueness checks. This is a centralization and privacy trade-off that has attracted criticism.


Semaphore Protocol

World ID is built on Semaphore, an open-source ZK protocol developed by the Privacy & Scaling Explorations team at Ethereum Foundation. Semaphore:

  • Uses Groth16 ZK proofs
  • Maintains a Merkle tree of identity commitments
  • Enables anonymous signaling — prove group membership while sending a signal (vote, application claim, etc.) with a nullifier to prevent double-signaling

World ID Credential Levels

Level Verification Method Sybil Resistance
Device Unique device biometrics (Face ID, etc.) Lower — device can be reset
Orb Iris scan via physical Orb Higher — iris is unique per human

Applications can specify which credential level they require.


Applications and Integrations

World ID has been integrated into:

  • Reddit — for proving humanity in certain subreddits
  • Minecraft — Worldcoin partnered for World ID-gated features
  • Okta — enterprise identity provider integration
  • Many Web3 projects — airdrop gating, governance Sybil resistance, Discord bot prevention

The World ID Developer Portal provides a simple SDK for integrating the anonymous verification flow into any web app.


Controversies and Criticisms

  • Biometric data centralization — Worldcoin stores IrisCodes on their servers; a breach or misuse could expose sensitive biometric data
  • Iris scan accessibility — Orb operators are concentrated in certain regions; underserved areas may lack access
  • Regulatory concerns — Several countries (Germany, Kenya, Brazil, Spain) launched investigations or imposed restrictions on Worldcoin’s data collection practices
  • Worldcoin token incentive — Users in certain regions received WLD token grants for scanning, raising concerns about informed consent
  • Sam Altman association — Open AI CEO Sam Altman co-founded Worldcoin, creating perception concerns about AGI/identity data concentration

World ID vs. Other Identity Systems

System Biometric? Private? On-chain Decentralized?
World ID (Orb) Yes (iris) ZK privacy Semaphore commitment Centralized biometric DB
Proof of Humanity Yes (video) No — video is public Kleros registry Decentralized arbitration
Gitcoin Passport Aggregated signals Partial Score on-chain Mostly decentralized
Anon Aadhaar Yes (govt ID) ZK proof ZK verified Relies on Aadhaar

Related Terms


Sources

Last updated: 2026-04