In the EU Digital Identity Wallet, the wallet provider's signed statement that a wallet unit is genuine and that its keys are held in suitable secure hardware.
A wallet unit is one user's installation of a wallet. Its Wallet Unit Attestation has two parts. The first is a statement about the wallet instance. The second is a key attestation: it says the keys are held in a secure cryptographic device, at a stated level of assurance.
Issuers of identity data and credentials check it before they issue. The wallet provider keeps it current and revokes it when the unit can no longer be trusted, for example after a device is compromised.
This is re-attestation in practice. The engineering questions are how long an attestation lives, which events force a new one, and how revocation reaches the credentials that depended on it.
Attested wallets and digital identity
Working on re-attestation for your product? A first call takes 30 minutes and commits you to nothing. Bring your product and the one question that worries you.
Next fixed date: EU Digital Identity Wallets are due in every member state on 24 December 2026, 42 days from now.