The disclosed embodiments provide a system that manages access to a user account from an electronic device. The system includes an identity service that provides a device token for the electronic device and a set of handles associated with the user account to the electronic device. Next, the identity service receives, from the electronic device, a handle registration containing one or more selected handles from the set of handles. Finally, the identity service transmits an identity certificate comprising an association between the selected handles and the electronic device to the electronic device, wherein the identity certificate and the association are used to route data associated with the selected handles to and from the electronic device.