--- title: "PACT: Anonymous Credentials for the Web" url: https://daily.dev/posts/pact-anonymous-credentials-for-the-web-66aggeom3 source_url: https://hacks.mozilla.org/2026/06/pact-anonymous-credentials-for-the-web type: article source: "Mozilla Hacks" published: 2026-06-23T15:42:01.000Z updated: 2026-06-24T06:20:19.535Z tags: ["web-security", "zero-knowledge-proofs"] reading_time: 20 upvotes: 1 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # PACT: Anonymous Credentials for the Web **[Mozilla Hacks](https://daily.dev/sources/hacks)** · 20 min read · 1 upvotes · 0 comments ## Summary Mozilla proposes PACT (Private Access Control Tokens), a new web standard to replace CAPTCHAs and invasive bot-detection with privacy-preserving rate limiting. The system uses three roles: Anchors (entities that vouch for users via scarce signals like subscriptions or phone numbers), Moderators (rate-limit enforcers), and Credentials (stateful cryptographic tokens). Built on Privacy Pass and Anonymous Credit Tokens, PACT uses issuer blinding and zero-knowledge proofs so sites only learn whether a user is within a rate limit — nothing more. Unlike Google's Web Environment Integrity or Apple's Private Access Tokens, PACT avoids tying web access to specific hardware vendors. Mozilla plans to bring draft specs to IETF and W3C, with Cloudflare and Chrome already involved. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Cloudflare teams up with Chrome, Firefox, and Edge on a privacy-first anti-bot protocol](https://daily.dev/posts/cloudflare-teams-up-with-chrome-firefox-and-edge-on-a-privacy-first-anti-bot-protocol-rexmxgi6t) · The Next Web · 1 upvotes · 0 comments - [Anonymous credentials: rate-limiting bots and agents without compromising privacy](https://daily.dev/posts/anonymous-credentials-rate-limiting-bots-and-agents-without-compromising-privacy-eezjsejvs) · Cloudflare · 0 upvotes · 0 comments - [Keeping the Web Open and Private in the Bot Era](https://daily.dev/posts/keeping-the-web-open-and-private-in-the-bot-era-yujf6mlk7) · Mozilla · 1 upvotes · 0 comments --- Tags: [#web-security](https://daily.dev/tags/web-security), [#zero-knowledge-proofs](https://daily.dev/tags/zero-knowledge-proofs) [View this post on daily.dev](https://daily.dev/posts/pact-anonymous-credentials-for-the-web-66aggeom3)