ID.me

There is a genre of company that sounds unbelievably boring until you notice it is standing between you and something you badly want - your tax refund, your VA benefits, your Medicare account. ID.me is that kind of company. It verifies that you are you, and it has quietly become the thing tens of millions of Americans pass through to reach their own government.

The origin story is smaller and stranger than the $1 billion contracts suggest. In 2010, two Harvard Business School classmates and Army veterans, Blake Hall and Matt Thompson, launched a Groupon-style deals site for the military community called TroopSwap. The interesting problem was not the deals. It was verification. To hand a veteran a discount, you first had to confirm the veteran was actually a veteran - and the way people did that was to wave around a DD214 separation form, a document stuffed with a Social Security number and a life's worth of sensitive detail, just to save 10% on running shoes.

Hall watched someone do exactly that in a store and had the thought every good infrastructure company starts with: this is broken, and it does not have to be. If you could verify a person's group affiliation - veteran, nurse, teacher, student - without making them over-share, you would have something. TroopSwap became Troop ID, and in 2013 the whole thing was rebranded as ID.me, with a larger and more audacious pitch: verify your identity once, then reuse that verified credential everywhere.

That pitch turned out to matter a great deal to governments, which have a chronic problem: they need to let the right person into an online account and keep the wrong person out, at enormous scale, without building the machinery themselves. It is easier to buy trust than to manufacture it. So agencies started buying. ID.me won an early GSA contract in 2014, became the first digital identity provider certified at the demanding NIST IAL2 assurance level in 2018, and then - when the pandemic hit and state unemployment systems were being drained by fraud - became a lifeline for dozens of states almost overnight.

CEO Blake Hall's resume does not read like a typical identity-tech founder's. Before the company, he led a reconnaissance platoon in Iraq across more than 450 combat patrols and earned two Bronze Stars - one for heroism stopping an assault on a combat support hospital in Mosul. It is tempting to turn that into a tidy motivational metaphor, so we will resist. The more useful point is narrower: running an operation under real uncertainty with real stakes is decent preparation for a business where a single verification error can lock someone out of their livelihood.

Co-founder Matt Thompson left in 2015. Hall stayed, and has spent the years since arguing - at the World Economic Forum, on stages, in front of Congress-adjacent scrutiny - that the internet needs a trusted identity layer, and that ID.me should be it.

It would be dishonest to describe ID.me as a frictionless success. Becoming load-bearing for government access made the company a lightning rod. In 2022, an IRS plan to require ID.me facial recognition drew a fierce backlash over privacy and over documented accuracy gaps for people with darker skin tones and for transgender users. The IRS walked it back and added a live-video alternative. During the pandemic, the "Trusted Referee" video queues - the human fallback when automated checks fail - sometimes left people waiting for hours to unlock benefits they urgently needed.

The instructive thing is not that the company got things wrong; every system operating at this scale does. It is that the failures were visible, and the responses - alternative verification paths, published privacy policies - had to be public too. That is the tax you pay for becoming the front door to the state.