The following is a guest post and opinion from Evin McMullen, Co-founder & CEO at Billions.Network.
Zero-knowledge (ZK)-wrapped identity was lauded as a silver bullet to solve everything about presenting yourself online—providing verifiable, privacy-preserving proof of personhood without the need to trust governments, platforms, or biometric databases.
The risks Vitalik raised in his recent post are not just theoretical. They are the inevitable outcome of systems that try to impose a single, fixed identity on a pluralistic internet. One account per person sounds fair—until it becomes mandatory. Add ZK proofs to the mix, and all you’ve done is encrypt the shackles.
Zero-knowledge proofs allow users to prove statements—age, residency, uniqueness—without revealing underlying personal data by using cryptographic methods. It’s like showing a sealed envelope that everyone can confirm holds the right answer, without anyone ever opening it. In theory, this should support privacy. But as Vitalik rightly argues, the problem is not what the proofs hide, but what the system assumes.
Most ZK-ID schemes rely on a core design principle: one identity per person. That might make sense for voting or preventing bots. But in real life, people operate across many social contexts—work, family, online, etc.—that don’t map neatly onto a single ID. Enforcing a one-person, one-ID model, even with ZK wrappers, creates a brittle system that’s easy to weaponize.
What began as a privacy tool becomes surveillance infrastructure, but with a nicer interface.
ZK-wrapped systems don’t fail because ZK is flawed; they fail because the surrounding architecture clings to an outdated concept of identity that’s singular, static, and centralized. That’s not how humans operate, and it’s not how the internet works.
The alternative is pluralism. Instead of one global ID that follows you everywhere, imagine a model where you appear differently to each app, platform, or community—provably human and trustworthy, but contextually unique. Your credentials are local, not universal. You’re verifiable without being traceable. And no one, not even you, can be coerced into revealing everything about yourself.
This isn’t a fantasy. It’s already working.
It’s a structural fix, not just a cryptographic one. Instead of building global registries that bind people to a single identity, we can anchor trust in pluralistic models featuring decentralized reputation graphs, selective disclosure, unlinkable credentials, and ZK proofs that enforce contextual verification rather than static identifiers.
Some see identity as a necessary evil—a way to prevent misinformation or spam. But good identity design doesn’t require surveillance. It just requires context.
We don’t need one ID to rule them all. We need systems that let people prove what’s needed, when needed, without turning every interaction into a permanent record. Want to prove you’re not a bot? Fine. Prove uniqueness. Want to prove you’re over 18? Great. Do it without handing over your birthdate, postcode, and biometric template.
Crucially, we must resist the urge to equate compliance with centralization. Systems that use coercive biometrics, rigid registries, or global databases to enforce identity may look efficient. But they introduce potentially catastrophic risks: irreversible breaches, discrimination, exclusion, and even geopolitical misuse. Biometric data can’t be rotated. Static IDs can’t be revoked. Centralized models cannot be made safe; they can only be made obsolete.
Vitalik’s essay warns of a future where identity systems, even when built on the best cryptography, accidentally entrench the very harms they set out to prevent. We share that concern. But we also believe there’s a way forward: one that doesn’t compromise on privacy, enforce uniformity, or turn people into nodes on a global registry.
That path is pluralistic and decentralized, and it’s already live.
Let’s not waste our best cryptographic tools on defending broken ideas. Instead, let’s build the systems that match how people actually live and how we want the internet to work.
The future of digital identity doesn’t need to be universal. It simply needs to be human.
