In a method of biometric identity assurance, biometric data based on a biometric modality is stored in a memory of a first computer. The biometric data is converted into a biometric template which is transferred from the first computer memory to a memory of a second computer. The second computer determines an encryption key based on a combination of the biometric template with a biometric-hash file of the user. Multiple credential files previously distributed among multiple remote computers are assembled into a single user credential file at the second computer. The first computer receives the encryption key and the user credential file from the second computer and accesses user credentials stored in the user credential file based on decryption of the user credential file using the encryption key. Via the thus accessed user credentials, the first computer uses or accesses one or more digital resources of the user.