Get the answers to all your questions about how to set up and use Midy.
Midy is a service that offers a simpler and more secure way to validate your identity online without sharing unnecessary personal data.
You can add your government-issued Driver License, government-issued State Photo ID and Passport. Additional documents may be available for you to onboard depending on your region and access to partner data providers. Your Midy welcome page will notify you of new partners in your region.
We refer to the stored information from your government-issued ID document as your “Verified ID”. To verify your identity, we perform verification checks on your government-issued photo ID and face checks against the photo on your document and your video selfie. Once verified, we securely store information from your document in Midy (your Verified ID). When you need to prove you are you, or share your identity data, with our partnered apps and services, you can use your Verified ID.
You can download the Midy app directly from the Google Play* or Apple App* stores in the United States and the United Kingdom.
* Google Play and the Google Play logo are trademarks of Google LLC. App Store is a service mark of Apple Inc., registered in the U.S. and other countries and regions.
Midy will only be available in English initially, with plans to support other languages in the future.
You’re all set. The next time you open Midy, you’ll just need to authenticate with your face or fingerprint! You won’t see the layers of security underneath, but they’ll always be there protecting you.
“Passkeys are a replacement for passwords that are designed to provide a more convenient, more secure, password-less sign-in experience on websites and apps.”¹
“Passkeys are a safer and easier replacement for passwords. With passkeys, users can sign into apps and websites with a biometric sensor (such as a fingerprint or facial recognition), PIN, or pattern, freeing them from having to remember and manage passwords.”²
Passwords are not only difficult to remember, but they’re also subject to dictionary attacks, credential stuffing attacks, and more. We want you to have a more secure and simpler way to access and protect your data.
Read more about passkeys here:
Midy uses your device secure storage to help keep your data safe. Midy can only access its stored information when you perform local device authentication to sign-in to Midy. If your passcode is removed (e.g., by turning off local device authentication), Midy will no longer be able to operate — even if you turn local device authentication back on and set up a new passcode. In this case, Midy will reset itself and prompt you to perform the sign-up process again. You can recover access to your Midy account using another of your linked devices or by using a recovery code (provided you have access to a previously generated one) to prevent having to reset your Midy account.
Once your Midy setup is complete, your sign-up email or phone number is associated with your account and cannot be changed. However, you can delete your account, including all saved data in Midy, and complete the setup process again using your new email or phone number.
If you replace your device, or otherwise lose access to Midy, you can regain access through:
Alternatively, you can create a new Midy account with a new email address or phone number, but you will not have access to the information in your previous Midy account using that device.
In the Midy app settings you will see a link to “Delete Midy”. This process is permanent in that your data held in your Midy app will be deleted, including all verified documents that you have stored. Your identity data that is backed-up in the Midy cloud (to permit multi-device access to Midy) will also be deleted. In addition, your identity data held in any of your other devices linked to this Midy account will not be accessible and will be deleted the next time those devices appear online to the Midy service. Certain data, including your account* information and activity history, will be retained in the Midy cloud for the data retention period, to meet audit and compliance requirements.
*Note: your email or phone number is included in the account information and kept for audit and compliance purposes. Please refer to the Midy Privacy Policy for more details about our data retention practices.
If you delete the Midy app (i.e., remove or uninstall the app through your device OS), all your identity and other data associated with the Midy account will be erased from that device only. The backup of your identity and other data on the cloud will remain in its encrypted form as deleting the local Midy app does not trigger the deletion of your Midy account. As a result, you may recover access to your Midy account, including your encrypted identity and other data in the cloud, by reinstalling Midy on the same device, or a new one and using either a previously generated recovery code or another device that has access to your Midy account.
Your personal information in Midy includes the email or mobile number you have used to set Midy up, and the data contained in the verified document(s) you have onboarded. This information is not directly modifiable within Midy. However, you may delete onboarded verified documents in the My Data/Documents section of the app, and new documents can be onboarded through an identity verification process with a government-issued ID. Changing your sign-up information (e.g., email or phone number) would require to you sign up again with Midy using your new email or phone number, but you would not be able to link/sync the personal information in the new Midy account with the previously created one.
Access to your email is not sufficient to gain access to your information in Midy. Midy is also protected with local device authentication and passkey – so access to your data on a specific device is protected with your face, fingerprint, PIN or pattern. We recommend you set up Midy with biometric access (face or fingerprint). Access to your email alone is also not sufficient to recover or link access to your Midy account to a new device – either a recovery code, or another linked device (protected with local device authentication and passkey) is required.
An identity verification will help you confirm that you are a real person by matching a live video of your face to the photo on your uploaded government-issued ID. For now, you will need to be 16 years of age or over to validate yourself using the Midy app.
Midy will not allow you to add expired government-issued ID documents.
For government-issued ID documents, you can add the same document more than once as Midy will not check if you have a Verified ID for that document already present in your wallet. This is helpful in case you have a new government-issued ID that has a more recent issue or expiry date than the original document you loaded into Midy. Once you load the new government-issued ID you can safely delete the original expired Verified ID.
Partners may specify that only one document issued by them can exist in Midy at a time.
Have a government-issued photo ID document from our list of supported documents. From your Midy home screen, you have the option to verify your identity document—this will begin the process. Select the country where your ID was issued, the type of ID, and allow Midy access to your camera. Follow the instructions given to take a clear photo of your ID and a video selfie. Your biometric information from your photo and video will be processed to confirm your identity.
It may take a couple of minutes for the verification process to complete. Once verified, your document will be securely stored in Midy as a Verified ID.
As part of the Midy sign-up process, you will need to protect access to your account using local device authentication, where Midy encourages use of biometrics (face or fingerprint). Midy has no visibility of the biometrics you use for local device authentication other than confirming that they have been set up.
As part of the process to verify your government-issued ID, document and facial biometric checks are done in cooperation with our service provider Onfido Inc. We compare the live capture of your face with the photo from your ID to confirm your identity. Facial scan data and associated biometric data is collected in the Onfido systems and is kept for no longer than 35 days. During this time, we and our service providers may review the extracted information to ensure the accuracy of the process and detect and prevent fraud.
For more details on use of your biometric information, please refer to our Biometrics Notice.
You may be prompted to start your identity document verification again if the process failed. Be sure to follow real-time instructions to take a good quality image of your document, and to ensure you perform the movements requested during photo capture to ensure the quality of your ID images and video selfie are sufficient.
To ensure you are using your latest document, the old Verified ID will need to be deleted from Midy and the new document will need to be verified.
For now, clicking My Data/History presents a placeholder Activity History screen. We are working on letting you view all your activities performed via Midy in the Activity History page.
Types of activities you will see include:
Your personal data will be stored and encrypted on your device with a secret key held by your device. Midy also creates a backup copy of your personal data which is then stored in encrypted form in the cloud. The keys used for encrypting your data are not backed-up to the cloud. This means your sensitive data remains in your control. Midy will also store limited information (email or phone) on its servers to register and maintain your account, but the rest is in your control.
Midy stores an encrypted backup copy of your identity and other data in the cloud, allowing you to synchronise your identity and other data across all your devices. It also allows you to recover access to your Midy account if you cannot access your active device (and you have previously generated a recovery code and still have access to it).
The Midy app is completely free to users.
Midy is currently only available in the United States and the United Kingdom. We’re planning our rollout of Midy to other countries, stay tuned!
You can access Midy’s Privacy Policy here: midy.com/privacy-policy.
Verifying your legal age is becoming an increasingly common requirement online. Many state and federal laws now place age related restrictions on a wide range of digital activities such as viewing age-specific content, purchasing age-restricted products online, and creating social media accounts. Midy provides a way for you to prove your legal age online while protecting your privacy, by only sharing the information you have consented to share.
Midy permits partners to make age verification requests based on their specific business need. For example, they may ask you to confirm whether or not you are on or over the age of 18, 21, 25, 50, 65, 70, etc. years. Additionally, partners may ask if you can verify that your age is within a specific range, such as between 18 and 25 or between 26 and 39.
Midy provides confirmation if your age does, or does not, fall in the requested age category. Midy does not share your actual age or date of birth, thereby maintaining your privacy at each step of the process.
The Midy app can be used across multiple devices. Many of us have more than one device, and it’s important you can access your identity and other data across all of them.
When you install Midy on a new device, you have option to ‘Get started’ (i.e., register for a new Midy account) or indicate that you ‘Already have Midy’, so you can link your device with an existing Midy account. Linking to an existing Midy account will transfer a copy of your encrypted identity and other data in the cloud to Midy on your new device. The linking process (via either a recovery code or another device with access to your Midy account) provides your new device with keys to access your identity and other data. Once linked, your new Midy device will continue to be synced automatically with all your other linked devices.
After you download the Midy app on your new device, you will see a small link on the “Get Started” screen or the registration page “Already got Midy?”. Clicking this link begins the linking process and creates a QR code on the new device. Scan this QR-code using your Midy app on any device currently linked to your Midy account. That’s it, the two devices should be linked. The QR-code remains active for only 15 minutes, so please use it within this time.
As the name suggests, a recovery code allows you to recover access to your Midy account in case you lose access to your device. It is presented in Midy as both a 64-character long code and a QR code. You can save the recovery code as text, PDF or even print it. For your security, we will not include your Midy-registered email or phone number in the PDF or printout.
You will need your Midy-registered phone number or email along with the recovery code to recover access to your Midy account using this method. You can also recover access to your Midy account using any device currently linked to your Midy account (see “How do I link a new device to an existing Midy account?”).
If you don’t have a recovery code or access to another device already linked with your Midy account, you will not be able to recover access to your Midy account.
In Midy, go to Settings to locate the ‘Recovery code’ option. The recovery code is presented in Midy as both a 64-character long code and a QR code. It is very important to store the recovery code securely and we highly recommend not to share your recovery code with anyone.
When you install the Midy app on a new device you can select “Already got Midy” followed by “Don’t have other devices” to start the recovery process. You will have to confirm you have access to your Midy-registered email or phone number by verifying the OTP (one time password). Once you correctly enter the recovery code or scan the QR code, you will now have access to your Midy account and all your associated identity and other data.
Gaining access to an existing Midy account on a new device, or re-gaining access on a current device, can be done through either device linking or use of a recovery code.
The device linking option requires you to have access to any device already linked with your Midy account.
If you do not have access to a device already linked with your Midy account, your only remaining option is to use a recovery code. This method requires you to have access to a previously generated recovery code for your Midy account.
We recommend that you create and safely store a recovery code since if you don’t have access to either a recovery code or another device already linked with Midy, you will not be able to regain access to your Midy account.
You will have to generate a new recovery code. We do not store any of your generated recovery codes, and so we cannot show you a previously generated one. Once you create a new recovery code, the previously generated recovery code is invalidated. Don’t forget to save your recovery code securely, and in a place where you will remember. 😊
We do not store any of your generated recovery codes, and so we cannot show you a previously generated one. If you have lost access to a previously generated recovery code, you can simply create a new one. The previously generated recovery code will be invalidated. Don’t forget to save your new recovery code securely, and in a place where you will remember. 😊
At times, we may have to update the way we generate recovery codes. When we do, we will notify you on the Midy welcome screen to create a new one. Your previous recovery code will be invalidated and no longer work. If you see this notification when you sign into Midy, please go ahead and create a new recovery code and store it securely.
Midy now supports multiple devices — which means you can now access all your identity and other data across all devices almost instantaneously. The data stored in Midy across your linked devices will be synced automatically, including your newly verified document.
Midy does not have device management yet – which means you will not be able to revoke device access. But stay tuned, we plan to release a device management feature soon.
In the meantime, if you have lost or broken a device, we recommend locking or erasing your mobile device. Read more about these actions here:
Midy allows you to add information or documentation relating to accounts you have with our partners. These are stored within Midy, and you can use them in future interactions with that partner, or other approved parties. The collection of your information you store in Midy from any partner is generally referred to as a document. Such documents could include your information from a loyalty program, an organization to which you are a member, an education or certification body, etc. Once your information with a partner is stored in your Midy, you can view it in your My Data area of Midy.
As new partners join the service, your Midy home screen will be updated to let you know what’s new. When a partner provides the ability for you to onboard your information at that partner to be stored within Midy, you will be given the ability to start the process within Midy. Each partner may have a slightly different process you must follow before they will issue your information for storage in Midy. This may include, for example, sharing identity information from a Verified ID in your Midy, or sharing other information Midy, or the partner, will need you to enter during the process. Once you successfully complete the process, the partner will provide the information to be stored in your Midy, and you will be able to view your new document in the My Data area of Midy.
Once you have a document stored in your Midy containing your information from a specific partner, you may use that information for future interactions with that partner, or other approved parties. For example, your information from your onboarded partner document may be used: to sign-in to that partner (or other approved destinations); to prove that you are registered with the partner (e.g., to receive benefits associated with partner-affiliation); to prove that you are a member of the partner’s organization; to prove your qualifications (e.g., based on information in your document) to approved parties, or to prove other types of relationship, attribution or association.
In the My Data menu, select Documents and then tap on each document to see the detailed information contained in the document, as well as option to delete the document. This includes both Verified ID documents and documents you have onboarded that contain your information with or via a specific partner.
Depending on the partner, you may also view your information from that partner in a partner-designated area configured in Midy, referred to as a ‘space’. Not all partners, however, will be configured with a space within Midy.
Certain partners may be configured with a partner-designated area within Midy, referred to as a space. You can access partner-specific information from within a partner space, including your document you have onboarded that contain your information with that specific partner. Not all partners, however, will be configured with a space within Midy. Spaces provide quick access to both the documents used to unlock the partner’s services and the services themselves in a condensed view and through a set of shortcuts. As such, Spaces represent a ‘filtered view’ of the overall Midy content and services, while the main Midy area maintains a view of all content within Midy, including partner content.
See below ‘What are the Midy Fair Credit Reporting Act (FCRA) Terms?’
The Midy Fair Credit Reporting Act Terms can be viewed at: midy.com/fcra/
These terms may apply if you are using Midy to obtain or share education documents.
Since these documents may be used to help demonstrate if you qualify for a certain job, they fall under the same act (the Fair Credit Reporting Act) that sets rules around sharing of information that may be used to help demonstrate if you qualify for obtaining credit (e.g., from a lender). As a result, any time you consent to share information from an education document in your Midy to an online service, Midy:
*In that notification, Midy won’t identify what exact information was requested or sent to the online service provider.