Zero-knowledge proofs for login

A computing system comprising:

• at least one processor;
• and
• a memory storing instructions that, when executed by the at least one processor, configure the computing system to:
• receive an ID token in response to an authentication request made to an authentication provider to authenticate a user with an account with the authentication provider, the ID token including an identifier of the account with the authentication provider and nonce data, the nonce data including at least a public key for an anonymous user account ID;
• and
• transact with a third-party service the transacting including a message with transaction details, the message including a signature signed using the public key in the nonce data.

A non-transitory computer-readable storage medium, the computer-readable storage medium comprising instructions that when executed by at least one processor, causes the at least one processor to:

• receive, by a third party, a message with transaction details to conduct a transaction from an account service acting on behalf of an anonymous user account ID, wherein the third party will only conduct a transaction with a known party;
• determining, by the third party, that the anonymous user account ID was authenticated by an authentication provider, wherein the authentication provider provided an ID token including a non-anonymous identifier of the account with the authentication provider and nonce data, the nonce data including at least a public key for the anonymous user account ID;
• and
• conducting the transaction by the third party based on the determination that the anonymous user account ID was authenticated by an authentication provider.