Why you should care

You already squint at websites.

Is this the real bank, or a lookalike? Is this shop the one my friend bought from, or a drop-shipper riding its name? Is this post really from that writer, or is it a scrape, a rewrite, a model’s best guess?

In 2026, that squinting is getting harder. AI makes plausible-sounding text cheap. Logos are easy to copy. A blue checkmark costs a few dollars a month. The old signals of “this is legit” are noisier than ever — and the cost of getting it wrong is real: a drained account, a chargeback, a story you amplified that turned out to be synthetic.

A Decentralized Identifier, or DID, is a small piece of cryptography that lets a site say who is behind it, in a way you can actually check. Not “trust me.” Check.

Before

Today, the trust you place in a website rests on a short stack:

The domain name — which can be typosquatted, recently registered, or just a good-enough impression.
The TLS padlock — which only tells you the connection is encrypted, not who’s on the other end.
Platform checkmarks — which tell you a platform accepted a form, not that the person behind the account is who they claim.
Your gut — which was trained before generative models existed.

When you’re wrong, you find out by losing something.

After

With a DID, the site itself carries a small document — a did.json — that lists its cryptographic keys and the services it stands behind. Any browser can fetch it. A resolver like WeDID checks the math and tells you, at a glance, whether the site is who it says it is.

What that unlocks, day to day:

Your favorite writer signs their posts. Scrapes and AI rewrites can’t forge the signature. If a piece is signed by them, it’s theirs.
Small shops carry identity across platforms. The same DID on their own site, on the marketplace, on the invoice. You can tell it’s the same seller, even if the platforms change.
Creators outlive platforms. When a social network disappears — and they all eventually do — your DID-backed identity moves with you. The followers you built don’t evaporate because someone else shut down a server.

The extension in your browser handles the cryptography. You see a small badge, a short popup, and a plain answer to who.

What fades

Some things you’ve worked around for years start to matter less.

“Is this the real account?” When identity is a resolvable fact, the question becomes boring. The site either proves it or it doesn’t.
Buying a checkmark. Platform-granted trust becomes one signal among many, not the signal.
Losing your history. If your identity is yours — not rented from a platform — migrating to a new service is a link change, not a reset.

The new normal

By the end of the decade, this will feel like the padlock feels now. Quiet. Almost invisible.

You’ll land on a site. There’ll be a small indicator in the corner of your browser — or maybe just next to the address bar. You won’t think about it. If it’s missing, that will catch your eye, the way a browser’s “Not Secure” warning catches your eye today.

The new norm isn’t a flashy trust score or a gamified reputation. It’s the quiet subtraction of a whole category of uncertainty. You stop squinting, because the browser already did.

And layered on top of the static identity — who — you’ll start seeing liveness too: is this site still active? Is the person behind it still showing up? A DID says who stands behind a page. Tools like Qart can say they’re still here. Together, they replace “I hope this is real” with “I can see that it is.”

That’s the shape of it. Not a revolution. Just the web growing up.

Want this in your browser? Install WeDID. Want to publish your own DID? Here’s how.