The key features of electronic identity in Estonia are outlined below. Detailed information and practical guidance on electronic identity and its use can be found on the id.ee knowledge portal.
Identity and electronic identity
From the perspective of state identity management, each person in Estonia has only one identity (the primary identity). Accordingly, both the physical and digital identity documents of a person are uniquely and inseparably linked to the unique identity of the holder. Using another person's identity is a criminal offence.
When a primary identity is created (for example, upon the registration of the birth of a child), the identity of the person must first be established and the required information entered into the relevant register. As part of this process, the person is assigned a unique personal identification code. In Estonia, electronic identity is inseparably linked to the primary identity. The eID means are the carriers of electronic identity.
Electronic identity means
- Before electronic identity means can be issued, the identity of the applicant must be verified.
- eID means are based on certificates linked to the individual, which are in turn linked to the person's primary identity.
- In Estonia, the available eID means are the ID card, the state- guaranteed Mobile-ID service, and the privately provided Smart-ID solution.
- The certificates associated with an eID means enable authentication, digital signing, and encryption/decryption. These certificates are always issued and revoked as a set.
- PIN1 provides access to the identity verification certificate, while PIN2 provides access to the digital signing certificate.
- For the ID card, Mobile-ID and Smart-ID alike, authentication (electronic identity verification) is performed at the highest assurance level, and a digital signature is legally equivalent to a handwritten signature.
- State- guaranteed eID means (the ID card and Mobile-ID) can also be used for cross-border authentication when accessing public e-services in other European Union Member States.
- Before using an ID card to create a digital signature for the first time, the PIN2 code must be changed.
- The status of the certificates of an ID card can be checked here: https://www.id.ee/en/rubriik/test-your-id-card/
Authentication
- Authentication, or electronic identity verification, enables users to securely prove their identity when logging in to electronic services.
- In Estonia, authentication can be performed using an ID card, Mobile-ID, or Smart-ID. Public e-services also support authentication using recognised eID means issued by other European Union Member States.
- To authenticate with an ID card on a computer, users need the state-provided ID software (DigiDoc4 together with Web eID), which is available for the Windows, macOS, and Linux operating systems.
- Authentication to public e-services is carried out through the State Authentication Service (TARA), administered by the Estonian Information System Authority (RIA). TARA provides a single authentication solution that supports multiple authentication methods.
- The State single-sign-on (GovSSO) service, also operated by the Estonian Information System Authority, enables users to sign in once and access participating e-services using an ID card, Mobile-ID, Smart-ID, or a recognised European Union eID.
Digital signing
- The following state-provided ID software is available for creating digital signatures: DigiDoc4 (together with Web eID) for computers and RIA DigiDoc for smart devices.
- The desktop version of the ID software is available for Windows, macOS, and Linux.
- The ID software for smart devices is available for smart devices running on the iOS and Android platforms.
- The DigiDoc4 desktop application enables users to create digital signatures with an ID card using a connected or integrated physical smart card reader. The RIA DigiDoc mobile application also supports signing with an ID card using the phone's built-in NFC functionality.
- Creating a digital signature with an ID card requires both an electronic timestamp and a signature validation service. For signing with mobile-ID and Smart-ID, the mobile-ID and Smart-ID services are also required. The timestamping, Mobile-ID and Smart-ID services are fee-based. The state-provided ID software allows individuals to create digital signatures free of charge for personal use. Where digital signatures are created for other purposes, a service agreement must be concluded with the relevant service provider.
- In addition to the state-provided solutions, the private sector offers a range of other digital signing solutions for both individual users and businesses.
Encryption and decryption
- The following state-provided ID software can be used for encryption and decryption: DigiDoc4 for computers and RIA DigiDoc for smart devices.
- The desktop version of the ID software is available for Windows, macOS, and Linux.
- The ID software for smart devices is available for smart devices running on the iOS and Android platforms.
- Encrypted files can only be opened by the individuals whom the sender has authorised to decrypt them.
- Encryption with an ID card is intended for the secure transfer of files. It is not suitable for the long-term storage of documents. Encrypted data is decrypted using the private key stored on the ID card. If the ID card is lost or its certificates are renewed, any data previously encrypted with the corresponding key can no longer be decrypted using that key.
Using electronic identity and user guides
Comprehensive information on the use of electronic identity (eID) means, the state-provided ID software, and troubleshooting common issues is available on the eID central information portal id.ee.
The portal provides guidance for first-time users of electronic identity services, experienced eID users, as well as system administrators and software developers working with digital signatures.
The desktop ID software can be downloaded from id.ee: https://www.id.ee/en/article/install-id-software/
If, for any reason, this is not possible, the software can also be downloaded from the following sources.
The ID software for Windows can also be downloaded here: https://installer.id.ee/media/win/Open-EID-26.8.27.8434.exe
The ID software for macOS can also be downloaded here:
ID card web authentication components and Chrome/Firefox signing components: https://installer.id.ee/media/osx/Open-EID_26.8.7.8430.dmg
Safari signing component: https://apps.apple.com/ee/app/web-eid/id1576665083?mt=12
DigiDoc4: https://apps.apple.com/ee/app/digidoc4/id1370791134?mt=12
The ID software for Linux can also be downloaded here:
Automatic installation script: https://installer.id.ee/media/install-scripts/install-open-eid.sh
Manual installation repository: https://installer.id.ee/media/ubuntu
ID software for Android: https://play.google.com/store/apps/details?id=ee.ria.DigiDoc
ID software for iOS: https://apps.apple.com/ee/app/ria-digidoc/id1216104448