EU Digital Identity Wallet
eIDAS2 EU-mandated mobile wallet providing citizens with cross-border digital identity credentials and selective attribute disclosure.
Last refreshed: 17 April 2026
What security standards will EU digital identity wallets have to meet before launch?
- What is the EU digital identity wallet and when will it be available?
- The EU Digital Identity Wallet is mandated under eIDAS2 and will allow EU citizens to store and share digital identity credentials across EU member states. ENISA opened a certification scheme consultation in April 2026; the wallet must meet CRA product-security requirements from December 2027.Source: European Commission / ENISA
- How does the EU digital wallet protect privacy?
- The wallet uses selective attribute disclosure, allowing users to prove specific claims (such as age or nationality) without revealing the underlying identity document. This is a core design requirement under eIDAS2.Source: European Commission
Background
The European Union Agency for Cybersecurity (ENISA) opened public consultation on a draft certification scheme for the EU Digital Identity Wallet on 3 April 2026, a key step in establishing how the eIDAS2 wallet will intersect with the Cyber Resilience Act (CRA) product security requirements. The certification scheme will define the security assurance levels that wallet implementations must achieve before they can be authorised for cross-border use across EU member states.
The EU Digital Identity Wallet is mandated under the eIDAS2 Regulation, which entered into force in May 2024. It requires all EU member states to offer citizens and businesses a digital identity wallet enabling them to store and present identity credentials, qualifications and attributes to public and private services. The wallet must support selective attribute disclosure, meaning users can prove specific claims (e.g., age over 18) without revealing the full underlying document.
For technology vendors building wallet infrastructure, the ENISA certification consultation is the technical specification document that will determine conformance requirements. The intersection with CRA is significant: wallets are connected digital products under CRA scope, meaning manufacturers will face dual obligations under eIDAS2 certification and CRA product-security requirements from 11 December 2027 when CRA main obligations apply.