A computing system comprising: one or more processors; and one or more computer-readable media having thereon computer-executable instructions that are structured such that, when executed by the one or more processors, cause the computing system to perform the following: retrieve a value of a device identifier of the computing system ; generate a device claim asserting the value of the device identifier ; associate the device claim with an identifier of a user of the computing system; generate and attach proof code to the device claim to generate a verifiable device credential, VDC , the proof code proving that the VDC is issued by the computing system that is associated with the user; and present the VDC with additional user information to a second computing system as part of an identity protection system , wherein the second computing system is associated with a relying entity or a credential issuer and when the second computing system receives the VDC, the second computing system is caused to use the proof code to verify whether the VDC was issued by a computing system associated with the user and to analyze the user information with the device identifier to determine whether the device is an authorized device of the user based on previous communication or transaction records. one or more processors; and one or more computer-readable media having thereon computer-executable instructions that are structured such that, when executed by the one or more processors, cause the computing system to perform the following: retrieve a value of a device identifier of the computing system ; generate a device claim asserting the value of the device identifier ; associate the device claim with an identifier of a user of the computing system; generate and attach proof code to the device claim to generate a verifiable device credential, VDC , the proof code proving that the VDC is issued by the computing system that is associated with the user; and present the VDC with additional user information to a second computing system as part of an identity protection system , wherein the second computing system is associated with a relying entity or a credential issuer and when the second computing system receives the VDC, the second computing system is caused to use the proof code to verify whether the VDC was issued by a computing system associated with the user and to analyze the user information with the device identifier to determine whether the device is an authorized device of the user based on previous communication or transaction records. retrieve a value of a device identifier of the computing system ; generate a device claim asserting the value of the device identifier ; associate the device claim with an identifier of a user of the computing system; generate and attach proof code to the device claim to generate a verifiable device credential, VDC , the proof code proving that the VDC is issued by the computing system that is associated with the user; and present the VDC with additional user information to a second computing system as part of an identity protection system , wherein the second computing system is associated with a relying entity or a credential issuer and when the second computing system receives the VDC, the second computing system is caused to use the proof code to verify whether the VDC was issued by a computing system associated with the user and to analyze the user information with the device identifier to determine whether the device is an authorized device of the user based on previous communication or transaction records. <EOS>