A computer-implemented method, the method comprising: accessing a private key of an attestation component that offers identity attestations of a particular decentralized identity, and that manages use of a private key of the particular decentralized identity, the private key of the attestation component being different than the private key of the particular decentralized identity; determining that an identity attestation of the attestation component is to be provided, the identity attestation of the attestation component being different than the identity attestations of the particular decentralized identity; the attestation component cryptographically securing the identity attestation of the attestation component with the private key of the attestation component; in response to the determination that the identity attestation of the attestation component is to be provided, causing the cryptographically secured identity attestation of the attestation component to be provided to a relying party; determining that a particular identity attestation of the particular decentralized identity is to be provided; cryptographically securing the particular identity attestation of the particular decentralized identity with the private key of the particular decentralized identity; and in response to the determination that the identity attestation of the particular decentralized identity is to be provided, causing the cryptographically secured identity attestation of the particular decentralized identity to be provided to the relying party; in response to providing a combination of the cryptographically secured identity attestation of the attestation component and the cryptographically secured identity attestation of the particular decentralized identity to the relying party, securing the combination of the cryptographically secured identity attestation of the attestation component and the cryptographically secured identity attestation of the particular decentralized identity with the private key of the decentralized identity; and verifying that the combination came from the decentralized identity with a public key of the particular decentralized identity. accessing a private key of an attestation component that offers identity attestations of a particular decentralized identity, and that manages use of a private key of the particular decentralized identity, the private key of the attestation component being different than the private key of the particular decentralized identity; determining that an identity attestation of the attestation component is to be provided, the identity attestation of the attestation component being different than the identity attestations of the particular decentralized identity; the attestation component cryptographically securing the identity attestation of the attestation component with the private key of the attestation component; in response to the determination that the identity attestation of the attestation component is to be provided, causing the cryptographically secured identity attestation of the attestation component to be provided to a relying party; determining that a particular identity attestation of the particular decentralized identity is to be provided; cryptographically securing the particular identity attestation of the particular decentralized identity with the private key of the particular decentralized identity; and in response to the determination that the identity attestation of the particular decentralized identity is to be provided, causing the cryptographically secured identity attestation of the particular decentralized identity to be provided to the relying party; in response to providing a combination of the cryptographically secured identity attestation of the attestation component and the cryptographically secured identity attestation of the particular decentralized identity to the relying party, securing the combination of the cryptographically secured identity attestation of the attestation component and the cryptographically secured identity attestation of the particular decentralized identity with the private key of the decentralized identity; and verifying that the combination came from the decentralized identity with a public key of the particular decentralized identity.