did:cheqd deprecation
did:cheqd is deprecated in Paradym and will be removed. We recommend migrating to did:webvh or X.509 certificates.
Timeline
| Date | What changes |
|---|---|
| Now | did:cheqd:mainnet and did:cheqd:testnet are deprecated. Everything keeps working. |
| December 1, 2026 | New cheqd DIDs can no longer be created. Existing cheqd DIDs keep working for issuance, verification and revocation. |
| March 1, 2027 | cheqd support is removed from Paradym. Credentials can no longer be issued, revoked or verified with a cheqd DID, and templates that use one can no longer sign OpenID4VP requests. |
Check if you are affected
A wallet is affected when it has a cheqd DID, which Paradym creates the first time a credential template issuer or a presentation template authentication method uses did:cheqd.
- In the dashboard, go to Trust → Identifiers. cheqd DIDs are marked as deprecated, and the wallet overview shows a warning.
- Over the API, list them with
GET /v1/wallets/{walletId}/dids?filter[method]=cheqd.
Migrate
Pick a replacement for each template that uses did:cheqd:
| Template | Replace did:cheqd with |
|---|---|
| AnonCreds credential template | did:webvh |
| SD-JWT VC credential template | An X.509 certificate, or did:webvh |
| Presentation template (OpenID4VP authentication) | An X.509 certificate, or did:webvh |
Then:
- Create new credential templates with the new issuer. The issuer of an existing template can’t be changed, and for AnonCreds the schema and credential definition belong to the issuer DID. See Issue Credentials.
- Issue new credentials to your holders from the new templates.
- Update your presentation templates so they accept credentials from the new issuer, for example the new AnonCreds schema or trusted entity, and switch the authentication method away from
did:cheqd. See Presentation Templates. - Share the new issuer with verifiers outside Paradym that trust your cheqd DID.
- Revoke old credentials you want to invalidate before March 1, 2027. After that, Paradym can no longer revoke credentials issued with a cheqd DID.
Still depending on did:cheqd?
If you can’t migrate in time, or need help planning it, contact us and we’ll work out a plan with you.
Last updated on