A verifiable presentation is a tamper-evident package that a holder creates to prove one or more claims from their verifiable credentials without handing over the full credential. The holder selects what to share, signs the package, and sends it to a verifier, who confirms it is authentic. This is how someone proves they are over 18 without revealing their date of birth, or that a license is valid without exposing every field on it.
This explainer covers what a verifiable presentation is, how it differs from a verifiable credential, and how selective disclosure and zero-knowledge proofs let a holder share the minimum a verifier needs. It is written for identity architects, privacy officers, and developers designing how people present credentials.
Key Takeaways
- A verifiable credential is issued by an authority; a verifiable presentation is built by the holder to share a chosen subset with a verifier.
- Selective disclosure lets a holder reveal only the claims a verifier needs, reducing personal data exposure and compliance risk.
- Zero-knowledge proofs prove a fact, such as being over 18, without revealing the underlying data like a date of birth.
- Data minimization is a core principle of NIST SP 800-63-4, and verifiable presentations are how holders meet it in practice.
Verifiable Credentials vs Verifiable Presentations: The Difference
The two terms describe different steps in the same trust model. A verifiable credential is a tamper-evident claim issued by an authority, such as a university degree or a government license, with authorship that can be cryptographically verified. The issuer signs it, and the holder stores it.
A verifiable presentation is what the holder builds from those credentials to share with a verifier. It bundles one or more credentials, or a filtered subset of their claims, into a single tamper-evident package that the holder signs. The W3C Verifiable Credentials Data Model 2.0 defines both structures.
The distinction matters because it puts control with the holder. The issuer decides what a credential contains, but the holder decides what to reveal at presentation time. That separation is the foundation for privacy-preserving sharing. Our guide covering verifiable credentials explained sets out the full model.
Why Oversharing Creates Privacy and Compliance Risk
Most verification today asks for too much. To confirm one fact, a verifier often requests a whole document: a full ID to check an age, a complete transcript to confirm a degree. Every extra field handed over is data the verifier now has to store, secure, and account for.
That over-collection is a privacy risk and a compliance problem. Regulations increasingly expect organizations to collect only what a task requires. When a verifier holds more personal data than it needs, it widens the attack surface and its own liability if that data is breached.
Verifiable presentations solve this at the point of sharing. The holder presents only the claim in question, so the verifier never receives the rest. This is the practical form of data minimization, and it is why privacy-first credentialing starts with how presentations are built.
How Verifiable Credentials Enable Selective Disclosure
Selective disclosure is the ability to reveal a subset of the claims in a credential rather than all of them. A verifiable presentation carries out that selection, and it works through a few distinct mechanisms.
- Credential selection: the holder chooses which credentials, out of many in their wallet, to include in a presentation.
- Claim filtering: within a chosen credential, the holder shares only specific fields and withholds the rest.
- Derived predicates: the holder shares a true or false answer derived from a claim, such as “over 18”, without exposing the source value.
Each mechanism reduces what the verifier sees while still letting them confirm what they need. Together, they turn a static document into a flexible proof that the holder controls. The same approach underpins any standards-based decentralized identity and verifiable credentials platform.
Zero-Knowledge Proofs and Derived Predicates
A zero-knowledge proof lets a holder prove a statement is true without revealing the data behind it. It is the strongest form of selective disclosure, because the verifier learns only that the claim holds, nothing more.
The classic example is age. A verifier needs to know that a person is over 18. With a zero-knowledge proof, the holder proves that the predicate is true while the actual date of birth stays private. The verifier gets a valid yes, and no personal detail changes hands.
EveryCRED uses zk-SNARK-based selective disclosure to support these derived predicates. For a privacy officer, this closes the gap between what a verifier is allowed to ask and what it actually receives, which is exactly where compliance risk usually sits.
How a Holder Builds a Verifiable Presentation
Creating a verifiable presentation is a defined sequence that the holder controls, usually inside a wallet application. The steps are consistent across standards-based systems.
- Select the credentials that answer the verifier’s request.
- Filter the claims or generate a derived predicate to include only the required data.
- Assemble the selection into a presentation with the necessary metadata.
- Sign the presentation with the holder’s key, making it tamper-evident.
- Transmit it to the verifier, who checks the signatures on both the presentation and the source credentials.
Because the holder signs the presentation and the issuer signed the original credential, the verifier can trust both the source and the sharer. The National Institute of Standards and Technology describes this presentment flow in its guidance on verifiable digital credential presentment.
Selective Disclosure in Practice
Consider a common scenario. A rental platform must confirm a prospective tenant is over 18 and holds a valid government ID. It does not require the address, ID number, or date of birth. With a verifiable presentation, the tenant proves both facts and shares nothing else.
The verifier stores no surplus personal data, so a future breach exposes nothing it did not need. That is data minimization working as NIST SP 800-63-4 intends, applied at the moment of verification rather than promised in a policy.
The same pattern extends across sectors: proving a professional license without revealing a home address, confirming employment without sharing salary, or verifying a health credential without exposing a full record. Each uses the same holder-controlled presentation to share one fact and withhold the rest.
See Selective Disclosure on the EveryCRED Platform
We built EveryCRED so holders can present verifiable credentials with true selective disclosure. Our platform supports claim filtering and zk-SNARK-based zero-knowledge proofs, so a verifier confirms exactly what it needs and receives nothing more. Credentials follow the W3C Verifiable Credentials Data Model 2.0 and align with NIST SP 800-63-4, and every presentation stays under the holder’s control. Book a demo, and we will show how selective disclosure works end-to-end, from issuing a credential to presenting a single claim without oversharing.
Conclusion
A verifiable presentation is the holder’s tool for proving what matters and withholding what does not. It bundles verifiable credentials, applies selective disclosure or a zero-knowledge proof, and hands the verifier only the claim in question.
For identity architects and privacy officers, that design turns data minimization from a policy goal into a technical default. The next step is to look at how your credential flows request data today, and where a verifiable presentation could let holders share a single claim instead of a whole document.
FAQs
What is a verifiable presentation?
A verifiable presentation is a tamper-evident package that a holder creates to share selected claims from their verifiable credentials with a verifier.
How is a verifiable presentation different from a verifiable credential?
A verifiable credential is issued by an authority, while a verifiable presentation is built by the holder to share a chosen subset.
What is selective disclosure in verifiable credentials?
Selective disclosure lets a holder reveal only specific claims from a credential, rather than exposing every field the credential contains.
How do zero-knowledge proofs protect privacy?
A zero-knowledge proof confirms a statement, such as being over 18, without revealing the underlying data, like a date of birth.
Does a holder need the issuer online to present a credential?
No. The holder presents credentials directly to the verifier, who checks the signatures without contacting the original issuer.