U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

SP 800-63-3

Digital Identity Guidelines

Date Published: June 2017 (includes updates as of 03-02-2020)

Supersedes: SP 800-63-3 (12/01/2017)


Paul Grassi (NIST), Michael Garcia (NIST), James Fenton (Altmode Networks)



authentication;  ; authentication assurance;  ; authenticator;  ; assertions;  ; credential service provider;  ; digital authentication;  ; digital credentials;  ; identity proofing;  ; federation;  ; passwords;  ; PKI
Control Families

None selected


SP 800-63-3 (DOI)
Local Download

Supplemental Material:
FAQ (other)
SP 800-63 (GitHub) (other)

Other Parts of this Publication:
SP 800-63A
SP 800-63B
SP 800-63C

Related NIST Publications:
SP 800-63-4 (Draft)

Document History:
03/02/20: SP 800-63-3 (Final)