EUDI Wallet
The EUDI Wallet is the European Digital Identity Wallet required by eIDAS 2.0, Regulation (EU) 2024/1183. Each EU member state must provide at least one to natural and legal persons, within 24 months of the entry into force of the implementing acts, so they can store and present identity data and attestations and sign with qualified electronic signatures.
A member state can provide a wallet directly, have it provided under its mandate, or recognise one provided independently. Implementations build on the Architecture and Reference Framework (ARF), which is informative: the legally binding requirements are the Regulation and its implementing acts. Wallets use OpenID4VCI to receive PIDs and attestations, OpenID4VP for remote presentation and ISO/IEC 18013-5 for presentation in proximity.
A wallet attestation is shown only to PID Providers and Attestation Providers during issuance, never to Relying Parties. A Relying Party instead validates the credential's signature against a trust anchor from a trusted list and checks its device binding.
Issuance, use and revocation of the wallet are free of charge for natural persons, and so is signing with a qualified electronic signature, which has the legal effect of a handwritten signature; member states may limit that free signing to non-professional purposes.
Public sector bodies that require electronic identification for an online service must also accept the wallet. Private relying parties that must use strong user authentication by law or contract, for example in banking, energy, health or telecommunications, must accept it at the user's voluntary request no later than 36 months after the implementing acts enter into force, with micro and small enterprises exempt. Very large online platforms that require user authentication must also accept it at the user's request, for the minimum data necessary.
- Regulation (EU) 2024/1183, Articles 5a, 5f
- ARF 3.0.0, 1.3
- ARF 3.0.0, 6.5.3.4, 6.5.3.5
- ARF 3.0.0, Annex 2
Can a EUDI Wallet issued in one EU country be used in another?
Yes, for the services the Regulation covers. Article 5f, titled cross-border reliance, requires public sector bodies that ask for electronic identification online to accept any EUDI Wallet provided under the Regulation, not only their own member state's. Private relying parties that must use strong user authentication, and very large online platforms that require user authentication, must accept it too, but only at the user's voluntary request.