---
updatedAt: 2026-04-07T10:14:48.000Z
agentTools:
  siteIndex: https://developers.liveramp.com/llms.txt
  projectIndex: https://developers.liveramp.com/rampid-api/llms.txt
---

# About Identity Envelopes

Learn what identity envelopes are.

* An Identity envelope is a secure and encrypted structure containing [RampIDs](https://developers.liveramp.com/rampid-api/reference/rampids) and [metadata](https://developers.liveramp.com/rampid-api/reference/metadata-bundles). You create encrypted envelopes from RampIDs to add a layer of obfuscation and enable secure RampID transfer through the programmatic bidstream.
* Each envelope is created with a client-specific encryption key that makes it unique.
* An envelope is valid for 15 days from the date of creation.
* An envelope is represented as a Base64-encoded string.

For more information, see "[Identity Envelopes](https://docs.liveramp.com/identity/en/liveramp-local-encoder.html#identity-envelopes)" in the Identity help.

# Identity envelope string example

`AY3SYJlFDI1RqsMv9gZOjOab6hGuwWKmbE4K70Z-Zex27DD6M9U0Jg`

Randomization ensures the string is different each time an envelope is created for the same underlying data.

# Responses

The success response for a [batch request](https://developers.liveramp.com/rampid-api/reference/create-batched-identity-envelopes) should match the success response for a [single transaction request](https://developers.liveramp.com/rampid-api/reference/create-a-single-identity-envelope).

A 400 error will look like the following example:

```json
{
	"code": 400,
	"document": {
		"error": {
			"message": "Envelope error: ENVELOPE_EXPIRED",
			"code": "600-0116",
			"requestId": "123456789987654321"
		}
	}
}
```