EUDI Wallet Spain: From DNIe to Digital Future

Overview

Spain approaches the EUDI Wallet deadline with nearly 20 years of digital identity experience, building on the DNI electrónico (DNIe) introduced in 2006. With a population of 47.0 million, Spain must now transition this established infrastructure to meet the EU's eIDAS 2.0 requirements by December 2026.

Unlike countries starting from scratch, Spain faces the complex challenge of integrating legacy systems—DNIe chips in physical ID cards, certificados digitales used by millions, and the Cl@ve authentication platform—with the new EUDI Wallet framework. The Royal Mint of Spain (Fábrica Nacional de Moneda y Timbre) leads this effort, partnering with technology companies to pilot solutions like Cartera Digital Beta and the MiDNI mobile app.

Key Information

• Responsible Entity: Royal Mint of Spain (Real Casa de la Moneda)
• Expected Wallet Name: Cartera Digital España (provisional)
• Current Pilots: MiDNI (mobile DNI), Cartera Digital Beta (age verification)
• Authentication System: Cl@ve (connected to eIDAS node)
• Legacy Infrastructure: DNIe (since 2006), certificados digitales
• Launch Status: In development, pilots active
• Regulatory Deadline: December 2026
• Key Challenge: Legacy system integration

Spain's Digital Identity Ecosystem

To understand Spain's path to EUDI Wallet, it's essential to understand the existing digital identity systems that millions of Spaniards already use daily.

DNIe (DNI electrónico) - The Foundation

The DNI electrónico launched in 2006, making Spain one of the first European countries to deploy electronic identity cards at scale. The DNIe is a polycarbonate card containing:

• Printed identity information (photo, name, address, DNI number)
• Embedded cryptographic chip with digital certificates
• eID functionality for secure online authentication
• Digital signature capability for legally binding documents

DNIe Adoption and Usage

As the mandatory national ID for all Spanish citizens over 14, DNIe has near-universal coverage. The electronic chip, however, requires:

• A smart card reader (USB or NFC-enabled smartphone)
• DNIe PIN code (set when the card is issued)
• Compatible software to access the cryptographic functions

This technical barrier meant many citizens obtained DNIe cards but never activated or used the electronic features, relying instead on the card as a physical ID document only.

Certificados Digitales - Widespread Digital Signatures

In parallel with DNIe, Spain developed a robust system of certificados digitales (digital certificates) issued by trusted certification authorities like:

• FNMT-RCM: Fábrica Nacional de Moneda y Timbre (Royal Mint)
• ACCV: Agencia de Certificación de la Comunidad Valenciana
• CATCert: Catalan certification authority

These certificates, stored as software files on computers or smartphones, enable:

• Tax filing through the Agencia Tributaria (tax authority)
• Social Security access (Seguridad Social)
• Business registration and commercial transactions
• Legal document signing with binding effect

Millions of Spanish citizens and businesses rely on certificados digitales for official procedures, creating a parallel digital identity system alongside DNIe.

Cl@ve - Unified Authentication Platform

Recognizing the complexity of managing multiple authentication methods, Spain launched Cl@ve as a unified platform for accessing government services. Cl@ve allows authentication via:

• Cl@ve Permanente: Username and password for low-security services
• Cl@ve PIN: SMS-based one-time password for medium-security services
• Certificado Digital: Integration with existing digital certificates
• DNIe: Electronic ID card authentication

Cl@ve and eIDAS Interoperability

Cl@ve is connected to Spain's national eIDAS node, enabling:

• Spanish citizens to access services in other EU countries using Cl@ve
• EU citizens to access Spanish government services using their national eID
• Cross-border authentication compliant with eIDAS regulation

This existing eIDAS integration positions Cl@ve as a natural authentication backbone for Spain's future EUDI Wallet.

Current Pilots: MiDNI and Cartera Digital Beta

Spain is actively testing digital wallet functionality through pilot programs, gathering user feedback and technical insights ahead of the full EUDI Wallet launch.

MiDNI - Mobile DNI Application

MiDNI is a mobile application that provides digital access to DNI information and functionality. Key features include:

• Real-time access to the DNI database for identity verification
• eID authentication directly from smartphone (no physical card reader needed)
• Digital signature capability for mobile document signing
• Attribute retrieval (name, address, photo) for service authentication

MiDNI and EUDI Wallet

MiDNI could potentially evolve to incorporate EUDI Wallet functionality, serving as Spain's primary wallet application. However, the relationship between MiDNI and the final EUDI Wallet remains undefined as Spain finalizes its technical architecture.

Cartera Digital Beta - Age Verification Pilot

Cartera Digital Beta is Spain's pilot program for verifiable digital credentials, currently focused on age-verification use cases. The pilot tests:

• Selective disclosure (proving "over 18" without revealing birth date)
• Verifiable credential issuance and storage on mobile devices
• Privacy-preserving verification protocols
• User experience for presenting digital credentials in real-world scenarios

Age verification serves as an ideal starting point because it's low-risk (no financial transactions), high-demand (alcohol sales, online content access), and demonstrates core EUDI Wallet capabilities without requiring integration of sensitive government databases.

University Wallet Pilot (Gataca + Royal Mint)

The Royal Mint partnered with Gataca, a Spanish digital identity company, to test an EUDI Wallet for universities. This pilot explores:

• Student ID credentials in digital wallet format
• Academic transcript verification for employers
• Campus access control via digital credentials
• Library and facility access without physical student cards

The university environment provides a controlled testing ground with tech-savvy users, allowing Spain to identify usability issues and technical challenges before broader rollout.

The Royal Mint's Role

Spain designated the Fábrica Nacional de Moneda y Timbre - Real Casa de la Moneda (Royal Mint of Spain) as the national entity responsible for EUDI Wallet development. This choice reflects the Royal Mint's existing role in Spain's digital identity ecosystem.

Why the Royal Mint?

The Royal Mint already manages:

• DNI Production: Manufacturing physical national ID cards
• Certificados Digitales: Operating FNMT-RCM, Spain's primary certification authority
• Secure Document Production: Expertise in anti-fraud technologies and cryptography
• Public Trust: As a state-owned entity, the Royal Mint carries government authority

Leveraging this existing infrastructure and expertise accelerates EUDI Wallet development compared to establishing a new entity from scratch.

Royal Mint's EUDI Wallet Responsibilities

• Defining technical architecture and standards
• Managing credential issuance infrastructure
• Ensuring security and anti-fraud measures
• Coordinating with Spanish government ministries for data access
• Testing interoperability with other EU member states
• Public communication and user education campaigns

Integration Challenges: Legacy Meets Modern

Spain's mature digital identity infrastructure, while advantageous in some ways, creates significant integration challenges as the country transitions to EUDI Wallet compliance.

Technical Compatibility

The DNIe chip uses cryptographic standards from 2006 that may not fully align with modern EUDI Wallet requirements. Specific challenges include:

• Certificate Formats: DNIe uses X.509 certificates; EUDI Wallet may require newer formats like W3C Verifiable Credentials
• Cryptographic Algorithms: 20-year-old encryption standards need updating to meet current security requirements
• Smart Card Readers: Millions invested in DNIe reader infrastructure may become obsolete if wallet shifts to smartphone-only

User Migration Complexity

Millions of Spanish users have established workflows with existing systems:

• Tax accountants using certificados digitales for client filings
• Business owners relying on DNIe for commercial registry access
• Citizens accustomed to Cl@ve for Social Security inquiries

Any migration to EUDI Wallet must ensure these workflows continue uninterrupted, requiring backward compatibility or parallel system operation during transition.

Institutional Coordination

Spain's digital identity ecosystem involves multiple entities:

• Agencia Tributaria: Tax authority with its own authentication systems
• Seguridad Social: Social security administration
• Regional Governments: Autonomous communities with separate digital identity initiatives (Catalonia's CATCert, Valencia's ACCV)
• Private Sector: Banks and companies that have integrated certificados digitales into their systems

Coordinating all these stakeholders to adopt EUDI Wallet standards by December 2026 is a massive organizational challenge beyond the technical work.

Security and Privacy Architecture

Spain's EUDI Wallet will inherit security practices from DNIe and certificados digitales while adding new privacy protections required by eIDAS 2.0.

Authentication Security

Expected security measures include:

• Multi-Factor Authentication: Biometrics (fingerprint/Face ID) + PIN or password
• Device Binding: Credentials tied to specific smartphone to prevent cloning
• Secure Element Storage: Cryptographic keys stored in hardware-protected areas of the device
• Time-Limited Sessions: Automatic logout after inactivity to prevent unauthorized access

Selective Disclosure and Data Minimization

The Cartera Digital Beta pilot demonstrates selective disclosure capabilities:

• Proving age ("over 18") without revealing exact birth date
• Verifying Spanish residency without revealing specific address
• Confirming driver's license validity without showing license number

This privacy-preserving approach is a significant improvement over current certificados digitales, which typically share all identity attributes or none.

GDPR and Spanish Data Protection

Spain's Data Protection Authority (Agencia Española de Protección de Datos - AEPD) will oversee EUDI Wallet compliance with:

• GDPR: EU-wide privacy regulation
• LOPDGDD: Spanish Organic Law on Data Protection and Guarantee of Digital Rights
• Transparency Requirements: Clear disclosure of what data is collected and how it's used
• Right to Deletion: Users can delete digital wallet without affecting physical ID validity

Timeline and Roadmap

Completed Milestones

• 2006: DNI electrónico (DNIe) launch with cryptographic chip
• 2014: Cl@ve unified authentication platform introduced
• April 2024: eIDAS 2.0 regulation signed into EU law
• May 2024: eIDAS 2.0 enters into force
• 2024-2025: MiDNI mobile app deployed
• 2025: Cartera Digital Beta age-verification pilot launched
• November 2024: EU adopts implementing acts for EUDI Wallet technical specifications
• 2025-2026: Gataca + Royal Mint university wallet pilot

Upcoming Milestones

• Mid-2026: Cross-border eIDAS interoperability testing with other EU member states
• Q3 2026: Beta testing of full EUDI Wallet with selected user groups
• December 2026: Spain must provide EUDI Wallet to all citizens (EU regulatory deadline)
• Q1 2027: Public rollout and user education campaigns
• End of 2027: Financial institutions required to accept EUDI Wallet for KYC verification
• 2030 Target: 80% of Spanish citizens using digital wallet regularly

Cross-Border Use and eIDAS Interoperability

Once Spain achieves EUDI Wallet compliance, Spanish digital credentials will be recognized across all EU member states.

Planned Use Cases

• Renting cars in other EU countries with Spanish digital driver's license
• Opening bank accounts across the EU without in-person verification
• Accessing healthcare in other EU countries with European Health Insurance Card integration
• Age verification for online purchases EU-wide
• Business registration and professional license verification for cross-border work
• Proving academic credentials for employment in other EU countries

Spain's eIDAS Node Advantage

Spain's Cl@ve system already operates an eIDAS node, giving Spain experience with cross-border authentication. This infrastructure can be leveraged for EUDI Wallet interoperability, potentially accelerating Spain's cross-border integration compared to countries building eIDAS connectivity from scratch.

What Spanish Citizens Can Expect

Based on pilot programs and official statements, here's what the EUDI Wallet experience in Spain is likely to include:

Expected Setup Process

1. Download the official EUDI Wallet app (likely Cartera Digital España or evolved MiDNI)
2. Authenticate using existing Cl@ve credentials, DNIe, or certificado digital
3. Verify identity through NFC scan of physical DNI or biometric verification
4. Set up device security (biometrics + backup PIN)
5. Select which credentials to add to wallet (driver's license, health card, etc.)

Supported Credentials (Expected)

• DNI/NIE (national/foreigner ID)
• Permiso de Conducir (driver's license)
• Tarjeta Sanitaria (health card)
• Certificado de Empadronamiento (residence certificate)
• Academic credentials (degrees, transcripts)
• Professional licenses (médico, abogado, etc.)

Integration with Existing Services

The EUDI Wallet will integrate with services Spanish citizens already use:

• Agencia Tributaria: Tax filing and consultation
• Seguridad Social: Benefits and healthcare access
• Sede Electrónica: Electronic offices of government entities
• Private Sector: Banks, insurance companies, mobile carriers

Official Resources

For the latest information about Spain's EUDI Wallet development:

• España Digital 2026 - National digital transformation initiative
• Cl@ve Official Portal - Authentication system information
• DNI Electrónico Information - Electronic ID card details
• Royal Mint (FNMT) - Responsible entity for EUDI Wallet