How Cr3dentials Works

Cr3dentials uses zkTLS to facilitate private, tamper-proof verifications directly from web-based platforms. zkTLS stands for zero knowledge Transport Layer Security. It allows users to generate a proof of what they see during a secure HTTPS session without revealing the full content of that session.

This means users can prove facts like revenue, activity, or account ownership from dashboards like YouTube Studio or Shopify Admin without exposing their login credentials or sharing raw data.

The verification process consists of three core parties:

1. Verifier

   1. The verifier is the organization requesting the verification. This could be a lender, fintech platform, marketplace, or any service that needs to validate user claims before providing access to capital, services, or opportunities.

      The verifier defines:

      • What needs to be proven such as revenue, payout consistency, or account age

      • Which platforms are acceptable

      • How much data they want to see, using Cr3dentials’ selective disclosure feature:

        • Full details (e.g. exact income values and payout history)

        • Specific data points (e.g. account creation date or monthly average)

        • Binary thresholds only (e.g. user earns more than $5,000 per month)

2. Applicant

   1. The applicant is the person being verified. They receive a secure link to complete the verification. From there, they choose a supported platform, connect their account, and approve the session. Cr3dentials runs locally in their browser and handles everything without routing data through centralized servers. Users never share login credentials with Cr3dentials. They remain in full control of what is verified and can optionally store encrypted access tokens for future sessions.

3. Data Sources

   1. Data sources are the platforms the applicant connects to such as social media accounts, ecommerce & accounting, payroll, and banking . Cr3dentials loads these dashboards in a secure browser environment and extracts the required data using zkTLS.

      Instead of returning the raw data, Cr3dentials generates a zero knowledge proof that the information on the page satisfies the verifier’s conditions.

User Flows

The user journeys are very simple

1. The reviewer initiates a verification request and shares a unique link with the applicant.

2. The applicant clicks the link and is redirected to the Cr3dentials appclip or mobile app.

3. The applicant selects the platform they want to verify, logs in, and authorizes data access.

4. Cr3dentials fetches the required data in a secure zkTLS session and generates a proof.

5. The zero-knowledge proof is automatically sent to the reviewer once verification is complete.

Verifier Flow:

Applicant Flow: