Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-63-4

Digital Identity Guidelines

Date Published: July 2025

Supersedes: SP 800-63-3 (03/02/2020)

Author(s)

David Temoshok (NIST), Diana Proud-Madruga (Electrosoft), Yee-Yin Choong (NIST), Ryan Galluzzo (NIST), Sarbari Gupta (Electrosoft), Connie LaSalle (NIST), Naomi Lefkovitz (NIST), Andrew Regenscheid (NIST)

Abstract

Keywords

assertions; authentication; authentication assurance; authenticator; credential service provider; digital authentication; identity proofing; federation; passwords; PKI
Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-63-4
Download URL

Supplemental Material:
Project homepage
Blog post
5 Key Changes graphic

Publication Parts:
SP 800-63A-4
SP 800-63B-4
SP 800-63C-4

Document History:
06/08/20: SP 800-63-4 (Draft)
12/16/22: SP 800-63-4 (Draft)
08/21/24: SP 800-63-4 (Draft)
07/31/25: SP 800-63-4 (Final)

Topics

Security and Privacy

identity & access management