Like signing in with Google or Apple, but backed by a verified government ID. Customers scan a QR code or tap a link, approve what you ask for, and they are in.
Log in to Hemly
Scan with the IDfier app
status: "pending"Session expires in 5:00Stop fake sign-ups and impersonation at the door, and make onboarding faster for the customers you want.
Every account is tied to a real person who has verified a government ID and passed a liveness check.
Customers scan a QR code or tap a link and confirm with Face ID or fingerprint. Nothing to remember.
Receive verified name, email, date of birth and more in one step instead of asking customers to type them.
The consent screen shows exactly what you request, and customers can decline. Trust goes both ways.
Passwords prove someone knows a secret. Social login proves someone controls an account. IDfier proves who they are.
| Email + password | Social login | Login with IDfier | |
|---|---|---|---|
| Proves who the person is | Proves account access | Government ID + liveness | |
| Verified name and age | Self-reported | ||
| No password to remember or leak | |||
| Stops fake and duplicate accounts | Easy to create new ones | One person, one identity | |
| Customer approves each field | Depends on the provider | Field by field |
The same consent screen IDfier users already know, started from your website or app.
Your backend
POST /api/v3/business/auth/request clientid · clientsecret { "status": 100, "data": { "referenceId": "550e8400-e29b-…", "qrReferenceSecret": "abc123", "createdAt": "2026-03-12T10:00:00Z" } }
The session is valid for five minutes.
Create a session, show a signed QR code and fetch the result. See the quickstart, code samples, data fields and errors on the developer page.
Choose the scopes for your use case and we configure them on your business account. Your customer sees exactly this list before anything is shared.
Example response from POST /business/auth/result
{
"status": 100,
"data": {
"user": {
"id": "u_8f3k2…",
"fullname": "Anna Lindqvist",
"email": "anna.lindqvist@outlook.com",
"authLevel": "Gold"
},
"session": {
"referenceId": "550e8400-e29b-…",
"status": "approved"
}
}
}The scopes are set on your business account, so every response contains only those fields plus a stable user id.
IDfierAdd the verification level scope to know how each customer proved their identity.
Document scan + face liveness
A government-issued ID was scanned and passed a live face match. Document fields are read from the image.
authLevel: "Bronze"Swedish BankID
Authenticated with BankID, Sweden's bank-issued electronic identity. Name and personal number come from the BankID record.
authLevel: "Silver"Document scan + face liveness + NFC chip
The ID's NFC chip is read and matched to a live face scan. The chip is signed by the issuing country, so the document is provably authentic.
authLevel: "Gold"Social logins confirm that someone controls an account. Login with IDfier confirms who they are: every IDfier user has verified a government ID, and you receive verified data rather than self-reported profile details.
Full name, email, age, an age answer (a limit like 18+ or 65+, or a range like 16–25), date of birth, gender, nationality, country, document type, IDfier handle, verification level and, for Swedish users, the personal identity number. Your business account is set up with only the scopes you need.
Yes. On desktop you show a QR code that customers scan with the IDfier app. On mobile, a link opens the IDfier app directly, and customers are returned to your site or app when they are done.
The session status changes to denied and nothing is shared. You can offer another way to continue, such as your regular sign-up.
Contact our team to set up your business account, choose your scopes and get access to the API documentation.