Electronic attestations of attributes (EAAs) are digital credentials issued by a trusted organisation to confirm particular facts about a person or organisation. An attribute might be an age, qualification, professional role, or business status. A verifier can check the credential without necessarily needing a full identity document.
In cybersecurity, EAAs help services make trustworthy decisions while supporting data minimisation: a user may prove a required attribute without disclosing unrelated information. In practice, an issuer creates the credential, a person stores and presents it through a digital wallet, and a relying party verifies it. Secure use depends on checking the issuer and credential, protecting the wallet, and handling expiry or revocation correctly. Poorly designed systems can expose more personal data than necessary or accept forged or invalid credentials.