A computer-implemented method for providing decentralized access to a user account, the computer-implemented method comprising: generating, by an electronic device, a public key and a private key for the user account, the user account being associated with the electronic device; generating, by the electronic device, a first inner account block of a blockchain for the user account, the first inner account block including: an identifier for the user account, the public key for the user account associated with the electronic device, encrypted data for the user account, and a signature over content of the first inner account block using the private key for the user account on the electronic device; generating, by the electronic device, a second inner account block of the blockchain, the second inner account block being signed by the private key for the user account and including a list of electronic devices with access to the user account or access to encrypted user account data; generating an outer account block of the blockchain in response to verifying that a second device, configured as an outer entity and requesting account access, has user consent to access the user account, the outer account block including: the identifier for the user account; a public key verified to be generated by the second device; encrypted data for the user account; and a signature over the content of the outer account block using a private key for the user account on the second device; providing, using the identifier associated with the user account, the blockchain to a plurality of other devices; and controlling access to the user account based on portions of the blockchain, wherein the second device, configured as the outer entity, is configured to not provision devices for use with the user account. generating, by an electronic device, a public key and a private key for the user account, the user account being associated with the electronic device; generating, by the electronic device, a first inner account block of a blockchain for the user account, the first inner account block including: an identifier for the user account, the public key for the user account associated with the electronic device, encrypted data for the user account, and a signature over content of the first inner account block using the private key for the user account on the electronic device; an identifier for the user account, the public key for the user account associated with the electronic device, encrypted data for the user account, and a signature over content of the first inner account block using the private key for the user account on the electronic device; generating, by the electronic device, a second inner account block of the blockchain, the second inner account block being signed by the private key for the user account and including a list of electronic devices with access to the user account or access to encrypted user account data; generating an outer account block of the blockchain in response to verifying that a second device, configured as an outer entity and requesting account access, has user consent to access the user account, the outer account block including: the identifier for the user account; a public key verified to be generated by the second device; encrypted data for the user account; and a signature over the content of the outer account block using a private key for the user account on the second device; the identifier for the user account; a public key verified to be generated by the second device; encrypted data for the user account; and a signature over the content of the outer account block using a private key for the user account on the second device; providing, using the identifier associated with the user account, the blockchain to a plurality of other devices; and controlling access to the user account based on portions of the blockchain, wherein the second device, configured as the outer entity, is configured to not provision devices for use with the user account.