Disclosed are various approaches for authenticating users using verifiable credentials. An enrollment request is received from a browser. In response to the enrollment request, a set of authentication questions can be selected. The set of authentication questions can then be sent to the browser. Next, a set of answers to a subset of the set of authentication questions is received. Subsequently, a decentralized identifier communication (DIDComm) protocol connection is established with a wallet application. Then, a verifiable credential that represents the set of answers to the subset of the set of authentication questions is issued to the wallet application.