What you can do
Use your wallet.
Someone wants to send you a credential. Here is what happens, what it looks like, and what stays under your control.
How a credential reaches you
You do not go looking for credentials. An organisation sends you one.
An organisation offers you one
A training provider, employer or agency sends you a link, or shows you a QR code. You will usually be expecting it.
You open it in your wallet
The wallet shows you who is offering the credential and what it says before you accept it.
It stays on your device
Once accepted, the credential and the keys that prove it is yours are held on your own device. DiligenceID does not keep a copy of it.
You share it when you choose
When an organisation asks for proof, you see who is asking and what they want. Nothing is shared until you approve it.
What you control
- Seeing the request before you answer it
- A request shows the organisation asking, what they have asked for, and which parts are required rather than optional. You read that before anything is sent.
- Sharing only part of a credential
- A credential can carry several facts, and a request can ask for just some of them. If an organisation only needs to know a licence is current, that is all that has to go across.
- Saying no
- Declining is a normal answer, not an error. If a request does not make sense to you, decline it and ask the organisation why they need it.
- Seeing what you have shared
- The wallet keeps a record of the organisations you have shared with and what happened, so you can look back at it.
- Withdrawing access you gave earlier
- You can review the organisations you are connected to and end a connection you no longer want.
Good to know
Credentials stay current.
A credential reflects a real situation, so it moves when that situation moves. The organisation that issued it sets an expiry date and can withdraw it if things change — when you leave a job, or a registration lapses.
That is what makes a credential worth more than a printed certificate: whoever checks it sees the current position, not a snapshot from two years ago. If a credential shows something you disagree with, the issuing organisation holds that record and can correct it.
Wondering about a particular phone, or how sharing behaves on your device? Ask us at support@maits.co.nz and we will tell you what is supported today.
If you need a hand
A request you did not expect
Decline it. A genuine request will come from an organisation you are already dealing with, for a reason you can recognise.
A credential that will not verify
Contact the organisation that issued it. They can see its status and can reissue it if something has gone wrong at their end.
You have lost access to your device
Contact DiligenceID help. Do not send passwords, codes or credential contents by email.
A dispute about the facts
If a credential says something you disagree with, the issuing organisation owns that record. DiligenceID cannot change what an issuer asserted.
Want to see it before you use it?
The product tour walks through the wallet screens with made-up credentials, so you can see what a request looks like before one arrives.