Misconception: Losing Your Wallet Means Losing Your Identity
KERI separates the identifier from any one device or wallet by using recoverable key state and pre-rotation.
Misconception: "If your phone or wallet is stolen, your KERI identity is gone."
A wallet is an important tool, but it is not the identity itself. In KERI, the AID persists across key rotations. Pre-rotation lets the controller commit to future rotation keys before they are needed, making recovery possible after compromise.
Summary
What the clips cover
- Thomas Mayfield - wallet functions. The wallet generates and rotates keys, stores credentials, and signs interactions. It is the holder's home, not the root of identity by itself.
- Thomas Mayfield - pre-rotation. KERI commits to future rotation keys in advance, keeping them hidden until a rotation is needed.
- Thomas Mayfield - compromise recovery. Pre-rotation supports post-compromise recovery because an attacker with current signing keys does not automatically control the next rotation keys.
- Samuel Smith - not your keys, still your identity. KERI is designed so loss of a key set does not necessarily destroy the identifier.
- Thomas Mayfield - ACDC recovery. Even if a wallet is lost, credentials can be recovered or reissued because proof of ownership traces back to keys and identifier control.
Why it matters
The LF Decentralized Trust "stolen phone" scenario shows why this distinction matters in ordinary life. If active keys are compromised, the controller can rotate to pre-committed keys and keep the same identifier, so credentials bound to that identifier can remain meaningful.
Sources
Misconception: KERI Is Just Another DID Method
KERI can interoperate with the DID world, but its larger goal is a portable identity and trust-spanning layer.
Misconception: Witnesses Control Your KERI Identity
KERI witnesses and watchers support availability and verification, but they do not own or issue the identifier.