# FFN Pass

> FFN Pass is a passkey-locked web wallet for verified facts about a person, run by Sweet Papa Technologies LLC as part of the FoFo Network (https://fofo.network). A person verifies once (an ID scan today, phone-wallet ID coming), then shares only the claims a site asks for, such as "verified person" or "over 21", as SD-JWT verifiable credentials over OpenID4VP. Sites get a signed answer with its evidence, never a copy of the document.

Key facts:

- The wallet lives only at https://pass.fofo.network. It is a web app, not an install, and it is unlocked with a passkey (WebAuthn). The vault is encrypted with a key derived from the passkey's PRF extension where available; otherwise FFN wraps the vault key in Cloud KMS and labels the credentials "custodial".
- No flow requires a face match. ID scans (via Didit) are document-only by default; a face match runs only if the person opts in for that scan.
- FFN never keeps ID images or addresses, and keeps no per-person list of the sites someone shares with. Each site gets its own subject identifier for the person.
- Every claim carries evidence: method, source, time and assurance (none, low, substantial, high). Unchecked claims are listed as "not checked", never as false.
- A failed or abandoned automated check is never stored or shown; the person is offered the next way to verify.
- FFN Identity credentials last 12 months, capped at the license's expiry. Issuers publish IETF Token Status Lists for revocation.
- Sites can issue their own scoped credentials (video call completed, references checked, trip completed, travel vouches) under their own did:web, limited by FFN's signed trust registry.
- First site: FoFo Adventures (https://adventure.fofo.dev).
- FFN never contacts people to ask for a code, a passkey or a photo of an ID.

## Pages

- [Home](https://pass.fofo.network/): what FFN Pass is, how it works, what a site sees, FAQ
- [How it works](https://pass.fofo.network/how-it-works): the vault and passkey, ways to verify, evidence and assurance, linked accounts, sharing, site credentials, expiry and re-checks, recovery, deletion
- [For sites](https://pass.fofo.network/for-sites): Verify with FFN for developers, the claim catalog, the Door SDK (`createSite` from `@fofonet/door-site`), issuing your own credentials, standards
- [Privacy and security](https://pass.fofo.network/privacy): what FFN keeps and never keeps, vault locking, ID checks, signing keys, controls

## Pricing

- For outside sites: $0.99 per FFN Pass check (a person sharing verified claims with your site).

## Standards and endpoints

- Presentation: OpenID4VP with DCQL; credentials are SD-JWT VC with key binding
- Issuance: OpenID4VCI (pre-authorized code) under https://pass.fofo.network/oid4vci/
- Issuer: did:web:pass.fofo.network (DID document at https://pass.fofo.network/.well-known/did.json)
- Credential type metadata: https://pass.fofo.network/vct/ (for example https://pass.fofo.network/vct/identity/v1)

## Related

- [FoFo Network](https://fofo.network): the network FFN Pass is part of
- [FFN Verified Business](https://registry.fofo.network): the same approach for small businesses, readable by AI agents (see https://registry.fofo.network/llms.txt)