Issue credentials your members truly own.

The proof rests on your domain, not on ours

That's the whole point. A FreeholdIP credential is checked against the signing key your organization publishes in its own DNS, read directly by whoever is verifying it, with no FreeholdIP server in the loop. The signature proves that key signed the credential. Your DNS record proves the key is yours. Whoever controls your domain is your organization, and anyone can confirm that for themselves.

Our part is narrower, and worth saying plainly: before an organization can issue here, we confirm it is the organization it says it is, and we don't open issuing to just anyone. That vetting is a gate, not the source of the trust. If FreeholdIP vanished tomorrow, every credential already issued would still verify.

Already an issuer?

Sign in to your portal to issue, renew, or revoke credentials.

Sign in to your Issuer Portal

Want to become an issuer?

We set up every issuer personally, so we can confirm you're the real organization you say you are. Here's how it works:

1. Apply with the form below. Tell us about your organization, then publish one TXT record on your domain holding your signing key. That one record proves both things at once: the domain is yours, and the key is yours. It's the same record the public reads when they check one of your credentials, so it isn't paperwork for us. It's the proof itself.
2. We verify you through your official channels and the proof you upload — never just an email address.
3. You generate your signing key in your own browser. We never see it. Your organization then takes its own name on the Algorand blockchain, an asset only you hold, publishing that public key where anyone can look it up without asking us. Then you issue credentials your members own.

Apply to get verified

Questions first? issuers@freeholdip.com.