Account verified at high level of assurance enables access to all electronic public administration services, including those requiring the strongest security (e.g. opening and managing government bonds asset account). You can also get a qualified personal certificate from PostSignum with level high. You will get level “substantial” automatically together with level “high”.
Property account for buying government bonds is designated only for Czech citizens.
How to get level high:
- High level of assurance can be obtained only by using a computer and hardware security keys with FIDO certification of at least level 2 and FIPS or level 2 certification and CCEAL6+.Security key must have a PIN set.
- Keys supporting level “high” are a GoTrust Idem Key and some Yubico keys (YubiKey 5 FIPS Series with NFC and Security Key NFC).
- GoTrust Idem Key can be bought here and Yubico keys can be bought here.
- Other security keys cannot be used, even if they have a PIN set up.
- Logging in to public administration services with a level of assurence “high” must be done in a browser supporting PIN entry while using the key.
- It is necessary to verify your identity. Identity verification can be done either using an existing means with level "high" (i.e. using eObčanka or I.CA identity with Starcos card) or with an identity document in person at a Czech POINT office. Other means of identity verification (e.g. using a data box, NIA ID or Mobilní klíč eGovernmentu) are not allowed as they do not meet the conditions for the level "high".
If the MojeID does not offer you the option to get the "high" level, make sure that you are using the correct key and that the key information has been passed through the browser.
We recommend adding the PIN on a PC or a notebook with an up to date operating system Windows 10, Windows 11 or Linux and in the latest stable Google Chrome browser. Browsers on mobile devices do not support PIN entry so they cannot be used to set up or access level "high".
To set up a level "high" key, insert the correct key into the USB port and click "Add Key" in the hardware key settings in your MojeID account. A dialog box will appear and then just follow the instructions. It is important to allow the MojeID site access to the key and set the PIN (4 to 8 characters). You will then be logged out of your MojeID account and just need to log back in to confirm your settings.
PIN can be set in the following ways:
Method for Chrome (OS Linux and Mac):
- In the Chrome browser menu click Settings → Privacy and Security → Security → Manage security keys → Create a PIN and choose your PIN (4 to 8 digits). Please, remember this PIN.
- You can also copy the following link and enter it in the address bar, which will take you directly to the security keys settings: chrome://settings/securityKeys
- The link chrome://settings/securityKeys should also work in the Vivaldi browser.
Method for Windows Hello (Windows 10 and 11):
On a computer with Windows Hello click Start → Settings → Accounts → Sign-in options → Security Key → Manage → Add Security Key PIN. You can also change your PIN this way (if you remember your original PIN).
It might not be possible to set up PIN on older operating systems (Windows 7) or older mobile devices. In such case the only way to set up security key PIN is to use PC or notebook with suitable operating system.
The PIN you set must be remembered carefully. In case you forget your PIN and repeatedly enter it incorrectly and lock the key (5 attempts), you can reset it using Chrome or Windows Hello.
Method for Chrome (OS Linux and Mac):
- In the Chrome browser menu click Settings → Privacy and Security → Security → Manage security keys → Reset security key and confirm the reset with your finger.
Method for Windows Hello (Windows 10 and 11):
On a computer with Windows Hello click Start → Settings → Accounts → Sign-in options → Security Key → Manage.
WARNING: Resetting the key will erase all of its settings. The entire process of pairing the key and your MojeID account to public administration services must be performed again after resetting the key, including identity verification (e.g. by visiting a Czech POINT office).
How to log in to level “high” services:
To log in to level “high” services, use latest versions of Chrome, Firefox, Edge, or Opera. These browsers allows PIN entry during login.
Edge browser can be downloaded (.deb or .rpm packages) at: https://www.microsoft.com/en-us/edge
Known problems with browsers:
GoTrust security keys do not work in browsers running Chromium 96. Specifically, Chrome and Chromium version 96.0.4664.45 and Edge version 96.
The mojeID account also gives you access to EU electronic services.
To access, you can use:
- An account with a high level of assurance
- An account with a substantial level of assurance, authenticated via a Czech POINT or other means except for the data box.
Unfortunately, the data box does not have a sufficient level of security, so identity verification via the data box cannot be used to gain access to EU services. Similarly, unfortunately, it is not possible to use other electronic means for which identity verification has been carried out via the data box.
You can log in to EU services using your MojeID account, for example, on the electronic portal of the Slovak Republic's public administration.
General procedure for logging in to EU services: switch the language version to English (if the site offers it) → find Log in → select European authentication (or European login, EU ID or eIDAS) → select the correct Czech Republic flag from the menu → proceed to log in with your MojeID account.
If you have any questions or comments concerning MojeID, contact us at podpora@mojeid.cz or call the technical support of the CZ.NIC Association, the administrator of the domain register, at +420 731 657 660 or +420 222 745 111 (24/7).