Frequently Asked Questions

Social media platforms are flooded with bots and sockpuppet accounts—deceptive actors pretending to be real people—making it difficult to tell who’s real. Our product offers a lightweight solution that allows users to prove they are real humans.

社群媒體平台充斥著大量機器人與傀儡帳號（這些欺騙性帳號冒充“真人”但實際並不存在），使人難以辨識真實用戶。我們的產品提供一個輕量化的解法，幫助用戶證明自己是真人。

Humans can pass biometric verification. Bots cannot. A sockpuppet account can be filtered out by anchoring identity to a passport.

人類能通過生物驗證，機器人無法通過。透過與護照綁定的方式，可排除傀儡帳號。

This credential is a fundamental building block for other services. For instance, the vote app can use it to ensure all votes are from real people. You can use it to prove your age threshold or to prove you’re a real human for a specific social media account.

這個憑證是其他服務的重要基礎元件。例如，vote app 可以用它來確保所有投票都來自真人。你也可以用它來證明你達到特定年齡門檻，或證明某個特定社群媒體帳號背後的使用者是真人。

The existing credential is automatically revoked when a new one is issued. You can request or renew a credential in the app. You can also erase all your data in the app, which will revoke all credentials and remove identifiers and private keys stored on your device. Revocation may take up to 20 minutes to fully propagate.

當你產生新的憑證時，舊的憑證會自動撤銷。你可以在應用程式中請求或續期新的憑證，也可以清除所有資料，這將撤銷所有憑證，並移除儲存在裝置上的身分識別碼與私鑰。撤銷程序可能需最多 20 分鐘才能完全生效。

According to the DIF paper, credentials require periodic expiration or re-verification. This reduces the risk of misuse and ensures the credential remains tied to the original holder. You can renew your credential through the app.

根據 DIF 的論文，憑證需定期到期或重新驗證，這能降低濫用或被盜用的風險，並確保憑證仍歸屬於原始持有人。你可以在應用程式中續期憑證。

Creating and extending Human Credentials is free. Creating and extending Uniqueness Credentials requires a Passport Membership. From the experience of the Web3 ecosystem, we’ve learned that increasing the cost to attackers is the most effective way to make large-scale Sybil attacks economically impractical. In this model, the “cost” comes from requiring an official passport in the real world, as well as the financial cost of using it. Furthermore, when the revenue from credential issuance comes from the user, the issuer has no incentive to misuse user data. However, if the revenue comes from social media platforms, users are more likely to fear data exploitation or privacy misuse.

建立與延長 真人憑證（Human Credential） 是免費的。建立與延長 唯一性憑證（Uniqueness Credential）需要購買護照會員資格（Passport Membership）。從 Web3 的經驗中，我們了解到，提高攻擊者的成本是讓大規模女巫攻擊（Sybil attack）在經濟上難以實現的最有效方法。這裡的「成本」來自於必須使用真實世界的官方護照，以及使用它所產生的金錢成本。此外，當憑證發行的收益來源於用戶時，發行方沒有動機去濫用用戶的資料；但若收益來自社群媒體平台，用戶反而更容易擔心其資料被誤用或濫用。

No. The credential is just a URL link and does not affect your actual social media account in any way.

不會。憑證只是一個 URL 連結，對你的社群媒體帳號不會產生任何實質影響。

Your passport data is processed and stored only on your phone—never uploaded to our servers. The app scans the MRZ and uses NFC to verify the passport chip. The raw data stays securely on your device. Only a non-sensitive hash and expiration date are included in the credential. Even if our server is compromised, no sensitive passport information is at risk.

您的護照資料只會儲存在您的手機上，絕不會上傳到我們的伺服器。應用程式會掃描 MRZ 並透過 NFC 驗證護照晶片。原始資料會安全地保存在您的裝置中。我們只會在憑證中使用非敏感的雜湊值和護照到期日。即使伺服器遭到入侵，也不會有任何敏感護照資訊外洩。