The trust layer for the human body

Your hand. Every door.
Every login. Every transaction.

SkinID turns a Swiss-engineered NFC implant into the master credential for your digital and physical life. One chip, signed once, used everywhere a contactless reader exists. This page shows what's live today and where we're going.

Order yours
The 5-year vision Why hardware-bound For investors For enterprises
Today, working in production

A real chip-bound login, simulated in your browser.

Click the floating SkinID button as if you were on github.com/login. Tap the ring to simulate a chip read. The whole ceremony is what happens server-side every time a SkinID user signs in — minus the actual NFC tap.

github.com/login
Tap your implant
Hold your hand near your reader
200ms
Total time from chip tap to filled form. Faster than typing one character.
AES-128
Mutual authentication between chip and server. NXP-certified secure element.
0 keys
Server holds zero keys to your vault. Your chip is the only path to plaintext.
∞ sites
Same chip, same identity, every site, every device.
The 5-year vision

A day in 2030 with one chip.

SkinID is shipping today as a password manager. The architecture extends to every contactless surface in your day. Each step below is a real technology stack, mapped to real partner conversations or roadmap items. Green means it works in production today. Amber means it's on the build roadmap. Purple means future-state, partner integration required.

07:00
🏠
Wake up. Tap the front door.
Smart lock recognises your chip's NFC signal at the reader. Door unlocks. The same auth that signs you into GitHub also lets you into your home — one credential, two entirely different physical surfaces.
Partner integration · 2027
07:30
☕
Tap the café terminal. Coffee paid.
DESFire EV3 supports EMV-compatible application files. Once issuer banks integrate, the same chip carries your contactless card. No phone needed, no card needed — your hand is the wallet.
Banking partnership · 2028
08:15
🚇
Subway turnstile. Tap and walk.
Transit operators already accept NFC contactless across London, Paris, Tokyo, NYC. SkinID implants are EMV-spec compatible, so once a transit authority enables open-loop payments, your hand is your subway pass.
Transit deal · 2027-2028
09:00
🏢
Office turnstile. Then your laptop.
Building access uses standard 13.56 MHz badges — same frequency as DESFire. Replace the badge with the chip already in your hand. At your desk, tap to autofill SSO; SkinID currently supports SAML, SCIM, and OIDC.
Enterprise pilots · 2026
11:30
🔑
GitHub. Banking. Slack. Your work apps.
The product you can use today. Tap your chip on a phone or USB reader, the SkinID extension fills credentials and signs WebAuthn passkeys. Every site. Every device. No master password. This is shipping.
Live in production today
13:00
🍽️
Lunch. Tap to pay. Tap to leave a tip.
Same EMV-compatible payment path as the morning coffee. The chip is the card, your hand is the gesture. No cards forgotten, no phone battery to die, no PIN to enter — the chip's secure element does the entire transaction.
Banking partnership · 2028
15:00
🩺
Pharmacy. Identity verified.
Swiss eID is migrating to mobile NFC by 2028. SkinID will bind a government-issued identity certificate to the chip's secure element. One tap proves who you are at a pharmacy, hospital, voting booth, or border crossing.
eID partnership · 2028+
18:30
🚗
Tap the car. Drive home.
CCC Digital Key (the BMW / Apple / Google standard for phone-as-car-key) accepts hardware tokens that meet its security profile. DESFire EV3 hits the bar. Future SkinID firmware ships with CCC-compatible profiles.
CCC integration · 2028
22:00
🛏️
Tap to lock. Your day is done.
The same chip, all day, every surface. Zero passwords typed. Zero cards lost. Zero phones forgotten. One physical credential, attached to the only thing you really do bring everywhere — yourself.
Vision · 2030
Why it works

Four design choices that make this defensible.

The competition is well-funded. We out-design them on each of these four axes.

🔒

Hardware-bound

Master encryption key lives only on the chip's secure element. NXP DESFire EV3 is CC EAL5+ certified — same security level as banking-grade smart cards. Without the chip in field, there is no key, anywhere. Not even on our servers.

👁️

Zero-knowledge

Server stores ChaCha20-Poly1305 ciphertexts bound (via AEAD AAD) to user, site, and credential ID. A breach of our database alone yields nothing. Audited by the design we publish openly at /architecture.

🌐

Universal NFC

13.56 MHz NFC is the same standard your phone, credit card, transit pass, hotel key, and office badge already speak. We don't need new readers — every reader on Earth that talks contactless cards already knows how to talk to the chip in your hand.

↺

Recoverable

Tier 1: a backup chip. Tier 2: a printable Shamir share, kept offline. Tier 3: KYC-mediated recovery as last resort. You're never one lost chip away from losing your digital life — but our cooling-off windows ensure recovery is not a backdoor.

For investors

The trust layer the world isn't building yet.

Every digital and physical authentication moment is shifting toward contactless. The infrastructure already exists. The chip already exists. The missing piece is the platform that ties it together — and ships at consumer scale. That's SkinID.

The TAM is the entire trust layer.

Every NFC-enabled smartphone (4.5 billion). Every contactless payment terminal (180 million worldwide, doubling every 4 years). Every door access reader (>1 billion installed base). Every WebAuthn endpoint. SkinID is structurally positioned to take a small slice of all of them.

  • Network effects: each new partner site or door integration makes every existing chip more valuable.
  • Switching cost: once your chip is enrolled, swapping vendors means a new piercing.
  • Hardware moat: direct partnership with NXP-certified piercing networks (Dangerous Things, etc.) for chip distribution.
  • Regulatory tailwind: EU eIDAS 2.0 + Swiss e-ID push contactless identity into government infrastructure.
Read the deck Book a call
Market today
4.5B phones
NFC-enabled, deployed
180M terminals
Contactless payment, 2× every 4y
1B+ readers
Door access readers installed
25% CAGR
Passwordless authentication market
Sources: GSMA, Visa Europe, IHS Markit, Gartner. Each market on its own is multi-billion-dollar. SkinID's unique position is being the credential at the intersection of all of them.
Where we are
Capability1PasswordApple PasswordsYubicoSkinID
Hardware-bound master key Software Yes (Secure Enclave) Yes (per device) Yes (in your hand)
Cross-device with one credential Cloud sync Cloud sync Per device One chip, all surfaces
Server can decrypt your vault Yes (with master pw) iCloud-encrypted n/a No, ever
Works at a door / payment terminal No No No Roadmap 2028
Survives losing all your devices Master pw + emergency kit Recovery contact No backup key = lost vault Shamir share (offline)
Switzerland-domiciled, GDPR + nFADP compliant Canada USA Sweden Yes
For enterprises

One chip per employee. Replace passwords, badges, and 2FA.

SkinID for business consolidates three categories of credential into one piece of hardware that can't be left at home, lost in a taxi, or coerced over a phone call.

What you replace.

  • Passwords + 2FA tokens: SkinID stores credentials end-to-end-encrypted; chip taps prove physical presence on every login.
  • Badge access: 13.56 MHz door readers already speak DESFire — the chip in your employee's hand IS their badge.
  • Hardware FIDO2 keys: SkinID signs WebAuthn assertions server-side under chip-bound keys. Your IdP sees a normal FIDO2 authenticator.

What you get.

  • SAML 2.0 + SCIM 2.0 + OIDC: works with Okta, Azure AD, Google Workspace, JumpCloud out of the box.
  • Tamper-evident audit log: SHA-256 Merkle chain of every authentication event. Replay-protected, externally pinnable.
  • Compliant by construction: Swiss-domiciled, GDPR + nFADP scope, RoPA + DPIA available. SOC 2 audit on roadmap.
  • Onboarding + offboarding in seconds: revoke a chip in the operator panel; all sessions die instantly. No badge collection ceremony.
Enterprise overview Schedule a pilot
Pilot program
For organisations 10-500 employees, ready to evaluate hardware-bound auth.
Phase 1 · Weeks 1-2
Procurement, NXP DESFire EV3 chip allocation, IT integration kickoff.
Phase 2 · Weeks 3-6
Employee enrolment via partner piercing studio. SAML / SCIM hookup. Audit log baseline.
Phase 3 · Months 2-6
Office door reader replacement, FIDO2 rollout to internal apps, KPIs reviewed at month 3 and 6.
For you

Yes, it really is just an NFC chip in your hand.

No battery, no GPS, no transmitter. The chip wakes up only when an NFC reader's electromagnetic field is within 4 cm. Otherwise it does literally nothing. Same hardware as a contactless credit card, same form factor as a grain of rice.

The five questions everyone asks.

  • Is it a tracker? No. Passive RFID. No power source. No transmission unless a reader is touching your hand.
  • Does it hurt? Less than a piercing. Five minutes at a partner studio (we'll send a list with your order). Healed in two weeks.
  • What if I lose access? Tier 1: a second backup chip. Tier 2: a printable Shamir recovery key. Tier 3: contact us. Account deletion is also self-service.
  • What sites does it work with? Any site with a login form, today. Browser extensions for Chrome / Firefox / Safari. iPhone + Android apps for native autofill.
  • Can I change my mind? Yes. Surgical removal is 10 minutes. Account deletion wipes every credential within 30 days. We hold no master key, so we can't decrypt anything once the chip is out.
Order yours Read the FAQ
The chip itself
Form factor. 2 × 12 mm glass cylinder. Inserted between thumb and forefinger via a single sterile injection.
Lifetime. 50 + years. The chip has no battery and no moving parts; the underlying silicon is the same NXP secure element used in passports and contactless payment cards.
Read range. ~4 cm. The chip cannot be read from across a room. To use it you actively bring your hand to the reader.
Removable. Yes, by a piercing professional or surgeon. We build the product as if you might want to leave one day; that's the only honest model.
MRI safe. Yes. Glass + copper antenna, no ferromagnetic parts.

The same chip in 2030 as the one we ship today.

What's live now is one slice — passwords and passkeys. The chip itself is built for everything else. Each integration we add (door, transit, payment, eID) ships as a free firmware update. You buy once.

Order yours Read the architecture Talk to us