A digital identity system comprises an enrolment module configured to receive a data item captured from an identity document, and create in persistent electronic storage a digital identity comprising the data item, a credential creation module configured to issue to a user device a credential bound to the digital identity, and a validation service. The validation service is configured to receive an electronic message comprising the credential and identifying a target device, validate the credential, and if the credential is valid, use the credential to transmit an electronic message to the target device, so as to render the data item of the digital identity available to the target device.