A person may have several carriers of electronic identity (places where his/her eID data collection has been saved to), but the identity on these carriers is always the same. Carriers of eID in Estonia are ID cards, residence cards, diplomatic IDs, digital ID, an e-Resident’s digital ID (hereinafter collectively referred to as ‘ID card’), and Mobile-ID.
Electronic identity operates on the basis of a public key infrastructure (PKI). The PKI model is based on two keys – a secret key and a public key. As is evident from the names of the keys, the secret key must be protected and can only be used by the person to whom it has been issued. The public key, on the other hand, is available to everyone and there is a specific link between the two keys. This model with a secret and public key enables safe entry into e-services, i.e. digital authentication and giving digital signatures. It also allows transferring data securely/confidentially.
All operations performed with means of eID (authentication, signing, and decryption) are PIN-protected. This prevents the misuse of eID means when PINs are not known.
Means of eID
In Estonia, the following means of electronic personal identification are valid: ID cards, Mobile-ID, e-Resident’s digital ID, diplomatic ID, and residence cards. These documents are issued by the Police and Border Guard Board.
Estonia’s eID uses a so-called secure data carrier that consists of a chip with keys and certificates stored on it, ensuring secure operations. A certificate is an electronic document connected to a specific person that contains the person’s personal information and the key necessary for identifying the person.
As at July 2026, there are approximately 1.2 million valid ID cards in circulation in Estonia and 219,000 people have Mobile-ID.
Estonia’s digital signature carries equal weight with a handwritten signature (see the trust levels of electronic signatures) and public sector institutions must accept digitally signed documents.
National means of electronic identification
ID card is Estonia’s primary document that carries electronic identity, which is compulsory according to the law. It is the most widely used option. More information about the ID card is available in the id.ee knowledge portal.
Residence card is a similar compulsory document for foreigners who are not citizens of a Member State of the European Union.
More information about applying for an ID card and residence card is available at the website of the Police and Border Guard Board.
Mobile-ID is a personal identification and digital signing application for mobile phones. A mobile phone’s SIM card with a public and secret key connected to it functions as a document similar to the ID card in electronic environments. You need to have an ID card to apply for Mobile-ID. NB! Encryption is not possible with Mobile-ID. More information about mobile-ID is available in the id.ee knowledge portal.
Digital ID is intended for use exclusively in digital environments. The issuance of Digital ID to Estonian residents ended on 1 May 2025; however, Digital IDs issued before that date remain valid until their expiry date. Digital ID cards continue to be issued to e-residents.
Smart-ID is an electronic identification service that uses the Smart-ID application on a person’s phone and the Smart-ID key management server service. Smart-ID can be issued to persons with an Estonian personal identification code. The Smart-ID service is provided by SK ID Solutions AS. Read more from the Smart-ID website.
The expert group assembled by the Information System Authority (RIA) found the assurance level of electronic identification of Smart-ID issued to persons with an Estonian personal identification code to be ‘high’.
The solution is provided to Estonian citizens, residents, as well as non-residents with an Estonian personal identification code. The expert group asks e-service providers to pay attention to the fact that differentiating between Estonian residents and non-residents is not possible when using Smart-ID for identification (as it would be with the e-resident certificate).
For more information, see the description of the assurance level of Smart-ID and the description of its operating procedure.
The expert group included representatives of the Police and Border Guard Board, the Ministry of the Interior, the Ministry of Economic Affairs and Communications, and RIA.
Documents
What’s contained in a certificate?
Upon the issuing of an ID card, the user receives two certificates, one of which is related to digital signatures and the other with authentication and encryption. A certificate connects a person with his/her public and secret key. A certificate contains personal information, including a person’s name and personal identity code and a unique key for public use. The certificate allows to verify digital signatures. If there is a mathematical match between a certificate and a signature, then it is certain that the person written in the certificate has provided the signature.
After providing a signature, the validity of certificates must be checked. To do that, the programme that was used for the provision of the signature automatically connects with the server of the certification centre SK ID Solutions (SK) and checks the validity of the certificate. If the certificate is valid, then the SK server issues a special certificate of confirmation that is added to the signature.
For the functioning of electronic identity, the state must ensure the existence and functioning of the public key infrastructure. The state sources much of the PKI-related services from the private sector (SK ID Solutions AS), e.g. the certification service, the infrastructure for checking the validity of certificates, the infrastructure for sharing the public key (the LDAP service), and the environments for creating keys (e.g. the ID-card’s chip).
The state organises the most important eID-related activities:
- The field of eID in Estonia is developed by the RIA and the Ministry of Justice and Digital Affairs in cooperation with partners from the public as well as the private sector.
- RIA is responsible for the collection of software applications (ID software) necessary for using eID.
- RIA is responsible for the quality and safety requirements of eID services.
- The Ministry of Justice and Digital Affairs is responsible for the legislation related to the security requirements of PKI services.
- The tools of secure authentication and signature (ID card, etc.) are procured and issued by the Police and Border Guard Board in accordance with the Identity Documents Act.
- Develops the vision and strategy for the field of eID and is the advocate for and the developer of positions in the field of eID in Estonia;
- is responsible for the security and compliance of the secret key carrier of eID tools and the software on them;
- is responsible for the functioning, development, and management of ID software designated for the end user;
- is responsible for the development, functioning, and management of eID’s software components designated for the developers and providers of e-services;
- is responsible for the interoperability of international electronic identities, e.g. the functioning, development, and management of transnational software solutions;
- participates in national and transnational work groups and is involved in the national development of the field of PKI;
- insures users in-service support for the ID software;
- ensures support for developers. The eID software has an open source code, so that all interested parties can see the source code and take part in its development via GitHub.
- Issues identity documents (ID card, residence card, and e-Resident’s digital ID) in accordance with the Identity Documents Act;
- organises public procurements for identity documents, part of which is also eID (cooperating with the Information System Authority);
- is responsible for the security of physical documents (security elements);
- organises the personalisation of documents;
- ensures a reliable issuing process for the documents;
- resolves technical issues and problems related to ID cards in cooperation with the Information System Authority.
- Issues diplomatic IDs, including eIDs.
- Responsible for the e-residency programme.
- Issues eID certificates and validity information of the certificates.
Last updated: 20.07.2026
