Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-63-3

Digital Identity Guidelines

Date Published: June 2017

Supersedes: SP 800-63-2 (08/29/2013)


Paul Grassi (NIST), Michael Garcia (NIST), James Fenton (Altmode Networks)



authentication; authentication assurance; authenticator; assertions; credential service provider; digital authentication; digital credentials; identity proofing; federation; passwords; PKI
Control Families

Access Control; Identification and Authentication


No Download Available

Supplemental Material:
None available

Publication Parts:
SP 800-63A
SP 800-63B
SP 800-63C

Related NIST Publications:
SP 1800-12 (Draft)
ITL Bulletin
SP 1800-12 (Draft)

Document History:
04/09/15: SP 800-63-3 (Draft)
05/08/16: SP 800-63-3 (Draft)
01/30/17: SP 800-63-3 (Draft)
03/31/17: SP 800-63-3 (Draft)
06/22/17: SP 800-63-3 (Final)