Best Offline Capability

Best Offline Capability: expert analysis covering NFC-based verification, local credential storage, proximity protocols, and real-world offline scenarios for EUDI Wallet implementations across Europe.

Top Recommendations

Why Offline Capability Matters

In an increasingly connected world, it might seem counterintuitive to prioritize offline capability. However, identity verification often happens in precisely the situations where internet connectivity is unreliable or unavailable. Police officers conducting roadside ID checks in rural areas, border guards at remote crossings, emergency responders accessing medical identity information, and security personnel at underground venues all need identity verification that works without depending on a network connection.

Germany's approach with the AusweisApp demonstrates the gold standard for offline identity. The German eID card contains a secure chip that stores identity credentials cryptographically, and these can be read via NFC by any compatible device without any internet connection. The cryptographic signatures on the credentials can be verified against pre-loaded trust anchors, ensuring authenticity even in a fully offline environment. This chip-based approach provides the highest assurance level possible for offline verification.

The Netherlands takes a different but equally effective approach with its local-first architecture. The NL-wallet stores all credentials encrypted on the device itself, rather than relying on cloud storage. When presenting credentials offline, the wallet uses Bluetooth Low Energy to establish a secure proximity channel with the verifier. This software-based approach does not require a physical chip card, making it more convenient for everyday use while still supporting strong offline scenarios.

How We Evaluated Offline Capability

Our evaluation tested each wallet in a fully offline environment with airplane mode enabled and no WiFi available. We assessed which credentials could be presented, the verification protocols supported (NFC, BLE, QR code), the speed of offline transactions, and whether the verifier could confirm credential authenticity without an internet connection. Germany scored highest because its eID chip-based verification works entirely offline at the hardware level.

We also evaluated the revocation checking approach for offline scenarios. When verifying credentials offline, there is a risk that a revoked credential could still appear valid. Germany and the Netherlands address this through short-lived credentials that are automatically refreshed when online, with a validity window that balances security against offline usability. Belgium's eID card uses certificate revocation lists that are periodically cached by verifier devices.

Poland's mObywatel earned strong marks for its mDowod (digital ID) offline presentation capability. With 20 million users, the app has been extensively tested in real-world offline scenarios including police ID checks. The offline verification uses QR codes that encode cryptographically signed credential data, allowing visual scanning without any proximity protocol hardware requirements. France Identite scored lower because its cloud-based architecture means some features require an active internet connection.

Key Features to Look For

NFC support is the most reliable offline verification channel. It works at close range (typically under 4 centimeters), provides fast data transfer, and operates even with minimal device battery. Look for wallets that support both NFC card reading (for chip-based eID cards) and device-to-device NFC (for smartphone-to-smartphone presentation). Germany and Belgium lead in NFC card support, while the Netherlands leads in device-to-device NFC capability.

Bluetooth Low Energy (BLE) provides offline verification at slightly longer ranges (up to 10 meters) and is useful in scenarios where physical contact between devices is impractical, such as age verification at a venue entrance. The NL-wallet and AusweisApp both support BLE-based offline credential presentation compliant with the ISO 18013-5 standard.

Local credential storage with hardware-backed encryption is essential for offline capability. Credentials stored only in the cloud are useless without connectivity. The best wallets use the smartphone's Trusted Execution Environment (TEE) or Secure Element to store credentials in a way that is tamper-resistant and available offline. Germany's AusweisApp uses both the phone's TEE and the eID card's secure chip, providing double-layered offline security.

Future Developments in Offline Identity

The EU's implementing acts for EUDI Wallets will include mandatory offline presentation capabilities for core identity credentials. This means all compliant wallets must support at least one offline verification protocol by the December 2026 deadline. The Architecture and Reference Framework specifies NFC and BLE as the primary offline channels, with QR code-based presentation as a fallback mechanism.

Ultra-Wideband (UWB) technology is emerging as a next-generation offline channel that combines the security benefits of proximity verification with more precise spatial awareness. UWB can determine the exact distance between devices, preventing relay attacks where a remote attacker tries to use someone else's credentials from a distance. Several EU member states are exploring UWB integration for high-security offline verification scenarios.

Offline credential revocation remains an active area of research. Current approaches using short-lived credentials or cached revocation lists involve tradeoffs between security freshness and offline availability. The European Commission is funding research into privacy-preserving revocation mechanisms that could provide near-real-time revocation checking even in offline or intermittently connected environments, potentially using distributed ledger technology.