Mobile navigation Search icon

Access to public administration services

As a mojeID user, you can use your mojeID account to access many public administration services (i.e., link your account with NIA ‒ National Point for Identification and Authentication).

Why access public administration services using mojeID?

  • You gain access to Citizen Portal (online services such as driver's score, confirmation of study, electronic prescription, extract from the criminal register and trade register, ...).
  • You can submit tax returns online, gain overview of pension insurance or incapacity for work any time, ...
  • If you have a data box, you can log into it more comfortably.

List of all provided services can be found here: https://info.eidentita.cz/sep/.

  • Your mojeID account.

    • If you do not have an account, you can create it here.

  • To have first name and last name, permanent address, e-mail and phone filled in.

  • Security key.

  • Verify your identity (at the Czech POINT office, via non-entrepreneur natural person's data box, via eObčanka or other authentication method). Identity verification has to be done even with already validated accounts.

  • Detailed manuals / videomanuals with step-by-step instructions (only in Czech)

Access to public administration services using mojeID is available only to the citizens of the Czech republic (non-entrepreneurs), who have a permanent residence address in the Population Register.

In order to link mojeID to public administration services, you need to have your account secured with a security key of level FIDO_CERTIFIED_L1 or higher. We recommend securing your account with multiple security keys. They serve as a backup in case one of them is lost.

Security keys that can be used to access public administration services (with "substantial" level of security, according to NIA):

  • Hardware keys with certification FIDO_CERTIFIED_L1 (level 1) or higher

  • Mobile device with operating system Android 7.0 or higher (system security key). The device must have an active screen lock - PIN, fingerprint, face recognition... You then use this mobile device to access mojeID.

  • Windows Hello (system security key) is a way of authenticating a user on devices using operating system Windows 10. For the service to work, the device must have a PIN, fingerprint reader or face recognition protection set up. Windows Hello is available only in latest versions of Windows 10.

  • Warning: Do not reset your device (to factory settings), do not remove screen lock (PIN, fingerprint, ...) and do not reinstall your operating system. Your system security key (Android, Windows Hello) will stop working and you will not be able to use it to access your mojeID accound or public administration services. If you use only this one key, you will lose access completely and will have to complete the whole pairing process again.

  • Recommendation: For the connection to public administration services to work correctly, it is necessary to allow mojeID website access to your security key while adding it.

  • If there is already a device with added security key (Android, Windows Hello), it is necessary to add the new security key on this device.

  • Recommendation: Use only one type of system security key to access public administration services. If you use only Android or Windows Hello as system security key to access public administration services (i.e. you do not use standalone hardware security key), login is always linked to the particular device (mobile phone, tablet or computer). It will not be possible to log in to public administration services and mojeID account settings from other devices. We recommend using Windows Hello on notebook/PC rather than Android.

  • Recommendation: While adding hardware security key on a computer with Windows 10, you will first be prompted to enter PIN or fingerprint by a Windows Hello screen. You have to cancel this first screen. Adding the hardware security key is confirmed on the following screens. If you enter a PIN on the first screen, Windows Hello will be added as a security key instead of your hardware key. After adding the key, we recommend checking the List of registered security keys if the correct key was added.

  • Recommendation: In your account in the List of registered security keys, you can find out, what type of key you are using. Click the security key name - here you can change the key name, additional information is located on the right side. If you see Key description: Unknown - you use an uncertified key or you denied mojeID access to the security key.

We recommend using several security keys. If you have more security keys, you can use them to access your account in case you lose one of them.

All security keys you want to use to access public administration services must have certification of Level 1 or higher.

While adding new security key, if you keep the box Use a security key to access public administration services checked, you will be able to use the key for this purpose right away. If you uncheck the box, it is possible to activate the  access to public administration services using this key later. All you need to do is go to Settings → Two-factor authentication → Security key, find the correct key and in the column Access to public administration services click Get. You will also need to verify your identity. The process is easier compared to the first time you add a security key to access public administration services. Just choose Using an existing authentication method and click Verify. On the eIdentity website choose mojeID from the list of providers, log in again using already paired security key, give consent to transfer data and click Complete to finish the process.

Recommendation: In your account in the List of registered security keys, you can find out, what type of key you are using. Click the security key name - here you can change the key name, additional information is located on the right side. If you see Key description: Unknown - you use an uncertified key or you denied mojeID access to the security key.

I want to use system security key Windows Hello and Android at the same time to access public administration services. How can I do it?

  • Buy a hardware security key with NFC. Add this key on the device you already use to access public administration services (if you use Hello on PC, add the key there).
  • Keep the box Use a security key to access public administration services checked - the new hardware security key will be automatically paired. Afterwards log into your mojeID account on mobile device using the NFC hardware security key. The key is already paired to the public administration services. In the settings add another security key, use fingerprint or screen lock to confirm adding the Android system security key, verify it using NFC hardware security key. Then you will be able to use your mobile device to access public administration services.

 

We recommend adding the security keys to mojeID account using Google Chrome. Always make sure you have the latest stable (non-beta) version.

We cannot guarantee that the security keys will work in other browsers.

The process of linking may vary depending on whether you own an authentication tool (eObčanka, Starcos card, NIA ID,...) already linked to public administration services or not. If you do have it, the process is easier and you will not have to visit a Czech POINT office.

 

Link to public administration services must be always confirmed by logging in with a password and security key. In this case, you cannot use a certificate to log in.

You can see our videomanual (only in Czech) or use the following method:

  1. Go to Settings.
  2. Secure your mojeID account with a security key in Two-factor authenticationSecurity key.
  3. Go back to Settings. In the Access to public administration services section, click Get access.
  4. Click Continue ‒ you will be prompted to log in again.
  5. In the Access to public administration services section, choose Visit a Czech POINT office and then click Show request.
  6. Print the displayed request or have it ready on your mobile and visit any Czech POINT office. Map of all Czech POINT offices can be found here.
  7. As soon as the request is processed, you will receive an e-mail.
  8. After receiving the e-mail, log into your account, go to Settings and in the Access to public administration services click Get access.
  9. A table with personal information will be shown. Click Complete to finish the process.
  10. Wait a moment before the pairing is completed.
  11. If everything is OK, you will be redirected to the Settings and in the Access to public administration services section a message "The option to log in to public administration services using mojeID is now enabled" will be shown.
  12. After successful pairing to public administration services, personal data handed over from the Citizen registry will be locked in your profile (first name, last name, birth date, permanent address). The Organization field will also be locked ‒ access to public administration services is for natural non-business persons only. Contact information in your account will be now automatically updated from the Citizen registry.

If you own an eObčanka already linked to the public administration services, you will not have to visit Czech POINT to verify your identity.

Link to the public administration services must be always confirmed by logging in with a password and security key. In this case, you cannot use a certificate to log in.

You can see our videomanual (only in Czech) or use the following method:
  1. Go to Settings.

  2. Secure your mojeID account with a security key in Two-factor authenticationSecurity key.

  3. Go back to Settings. In the Access to public administration services section, click Get access.

  4. Click Continue ‒ you will be prompted to log in again.

  5. In the Access to public administration services section, choose Using an existing authentication method and then click Verify.

  6. You will be redirected to the eIdentita.cz portal. Choose eObčanka as a login option.

  7. Give consent with the usage of personal data.

  8. A table with personal information will be shown. Click Complete to finish the process.

  9. Wait a moment before the pairing is completed.

  10. If everything is OK, you will be redirected to the Settings and in the Access to public administration services section a message "The option to log in to public administration services using mojeID is now enabled" will be shown.

  11. After successful pairing to public administration services, personal data handed over from the Citizen registry will be locked in your profile (first name, last name, birth date, permanent address). The Organization field will also be locked ‒ access to public administration services is for natural non-business persons only. Contact information in your account will be now automatically updated from the Citizen registry.

You can see our videomanual (only in Czech) or use the following method:

  1. Go to Settings.
  2. Secure your mojeID account with a security key in Two-factor authenticationSecurity key.
  3. Go back to Settings. In the Access to public administration services section, click Get access.
  4. Click Continue ‒ you will be prompted to log in again.
  5. In the Access to public administration services section, choose Use data box and then click Verify.
  6. Give consent with the usage of personal data and continue to the data box login page.
  7. Log in to your data box. Only an authorised person can log in and you can only use non-business natural person's data box.
  8. Send the prepared concept with a subject mojeID identity verification. The request is usually processed within an hour. As soon as the request is processed, you will receive a message to your data box and to your e-mail.
  9. After you receive the e-mail, log in to your mojeID account, go to Settings and in the Access to public administration services click Get access.
  10. A table with personal information will be shown. Click Complete to finish the process.
  11. Wait a moment before the pairing is completed.
  12. If everything is OK, you will be redirected to Settings and in the Access to public administration services section a message "The option to log in to public administration services using mojeID is now enabled" will be shown.
  13. After successful pairing to public administration services, personal data handed over from the Citizen registry will be locked in your profile (first name, last name, birth date, permanent address). The Organization field will also be locked ‒ access to public administration services is for natural non-business persons only. Contact information in your account will be now automatically updated from the Citizen registry.

Warning:

  • It is possible to request identity verification even with a data box of an organization or legal person. Unfortunately in this case the identity verification will fail and you will receive an appropriate message.
  • If you want to use an organization's data box to verify your identity and use mojeID to access public administraton services, you can do it by setting up a NIA ID. You can register to NIA ID using this form and then verify the request by logging in to your data box as an authorised person. You can then pair the activated NIA ID with your mojeID account.

If you have a mojeID account connected to the public administration services, certain data in your profile cannot be changed (first and last name, birth date, permanent address). These data (except for the Organization field) are automatically updated from Citizen registry.

If you are in the list of registered keys and in the column Certification level is next to your security key message Certification not provided, you probably denied the mojeID website access to the information about your security key. To be able to use this key to access public administration services, you need to remove this key, add it again and allow mojeID website access to the information about your security key.

Once you have requested identity verification via Czech POINT office (using the form Data provision from the Register of inhabitants to another person) please wait for the confirmation e-mail. The request is usually processed within 10 minutes.

Then please sign in to your account and confirm the identity verification.

After logging into your account, go to Setting tab, in the section Access to public administration services click on the Get access button. Then click on the Complete button to finish the process of accessing public administration services.

If the confirmation e-mail does not arrive within one day, we were probably not able to match the request ID. Verify once again that the request ID on the confirmation is correct. If not, you must go to Czech POINT again. If the identifier is correct, please contact our technical support ( e-mail podpora@moje.cz or phone +420 222 745 111).

There are several ways to cancel access of you account to the public administration services. If you want to link your account again in the future, you will have to go through the whole process again (including a potential Czech POINT visit, if you do not have some other authentication method).

How to cancel the access?

  1. Log in to your mojeID account.
  2. Go to Settings.
  3. In the Access to public administration services section click Set.
  4. Click Remove access – a new login will be required as a confirmation.
  5. After removing access you will no longer be able to access public administration services using your mojeID, but your account will remain secured with a security key.

Other methods of removing access to public administration services:

Cancel access by removing paired security keys:

  1. Login to your mojeID account.
  2. Go to Settings.
  3. In the Two-factor authentication section click Set.
  4. In the Security key section click Set.
  5. Find the security keys linked to public administration services, click Remove and confirm – new login will be required as a confirmation.
  6. After logging in, your security key will be removed and the access to publuc administration services will be cancelled.

Unlink by resetting the two-factor authentication login:

  1. While logging into mojeID, click the Does your two-factor authentication not fucntion properly? link.
  2. Enter the control code.
  3. Enter PIN1 (from e-mail), PIN2 (from SMS), password to your mojeID account and press Remove.
  4. This way, all two-factor authentication methods will be removed from your mojeID account and your access to public administration services using mojeID will be cancelled.

By calling the helpdesk phone line (operating 24/7) ‒ in case of security keys loss or suspicion of misuse of the mojeID account:

  1. Helpdesk will ask you for several details from your profile (first name, last name, birth date, permanent address, e-mail, telephone) to verify your identity.
  2. If everything checks out, helpdesk will cancel access to public administration services.
  3. This way, your account will no longer paired to public administration services. Your account will still be secured with two-factor authentication.

Reset of the login by verified form:

  1. Download and fill the formulář Žádost o reset hesla v MojeID (only in Czech).
  2. Have it verified and send it to our office. What to do it is described here.
  3. After the request is processed, login to your mojeID account is reset. All two-factor authentication methods and access to public administration services are removed.
  • Apple devices as a system security key
    • Some Apple devices cannot be used as a system security key. It will not be possible to access public administration services with mojeID account using these devices.
  • Can I use hardware security key on Apple devices?
    • Yes, hardware keys can be used. Choose the correct type of connector (USB, Lightning) to connect to your device/devices. On mobile devices you can also use keys with NFC technology (if supported).
  • Access of mojeID website to your security key
    • If the mojeID website is not allowed access to your security key in your browser, the certification of your security key might not be identified. Because of this, the key will not work for connection to the public administration services.
  • Docking station and extension cables
    • We recommend connecting the security key to your device directly. The security key might not work properly if you use docking station or extension cable.
  • Windows Hello and security keys
    • We do not recommend using Windows Hello in combination with hardware security key. Use Windows Hello only as a standalone system security key. More about types of security keys can be found in the chapter Security keys, settings and level of assurance.
  • Up-to-date browser and operating system
    • We strongly recommend using only the latest stable (not beta) version of your browser and keeping your operating system updated. An obsolete version of a browser is one of the most common causes of the security key not working or being uncertified (uncertified security keys cannot be used to access public administration services).
  • Using Android and Windows Hello as system security key
    • Use only one type of system security key to access public administration services. If you use only Android or Windows Hello as system security key to access public administration services (i.e. you do not use standalone hardware security key), login is always linked to the particular device (mobile phone, tablet or computer). It will not be possible to log in to public administration services from other devices. We recommend using Windows Hello on notebook/PC rather than Android.
  • Recommended browsers for adding security keys
    • We recommend adding the security keys to mojeID account using Google Chrome. Always make sure you have the latest stable version (not beta). We cannot guarantee that the security keys will work in other browsers.
  • Do I really have to use Google Chrome?
    • It is enough to use Google Chrome browser for adding your security keys to your account (do not forget to allow mojeID website access to your security key).
  • Security key does not respond to touch
    • Make sure you touch your security key strong enough. If you have dry hands, the contact area on your key might have trouble registering your finger.
  • Message Registration failed, incorrect data from security key. 
    • If you use a system security key (mobile phone, tablet) and you see this message, it means your device sent the required data out of specification in the wrong format. In this case, the problem is probably on the side of device manufacturer. Please, use different device or hadrware security key. You may also contact the device manufacturer and ask for a fix.
  • Message Cannot disable authenticator. / Nepodařilo se zrušit autentifikační prostředek.
    • If you see this message when trying to disable a security key connected to public administration services, it means the public administration services systems are currently not running. Please wait until they start running again and then try to disable the security key again.
    • During public administration systems outage it will not be possible to cancel the connection of your mojeID account. It will not be possible to remove security keys connected to the public administration services nor to remove them by resetting the two factor security using the link at the login page.
  • Message It is not possible to complete the access to public administration services. / Není možné dokončit proces zpřístupnění služeb veřejné správy.
    • If you see this message when trying to pair your account, it means the public administration services systems are currently not running. Please wait until they start running again.
  • Where to find details about my security key?
    • In your account in the List of registered security keys, you can find out, what type of key you are using. Click the security key name - here you can change the key name, additional information is located on the right side. If you see Key description: Unknown - you use an uncertified key or you denied mojeID access to the security key.
  • My security key is not supported because it cannot be identified
    • Some devices are not fully compatible and cannot be used as security keys. At the moment, this applies for example to Apple mobile devices.
    • You can find a list of recommended security keys in the chapter Security keys, settings and level of assurance.
  • Non-functioning security key GoTrust Idem Key on Ubuntu version 18
    • It is possible that security key GoTrust Idem Key will not function on operating system Ubuntu 18 (or at other OS based on same core).
    • Method to make it work by adding and UDEV configuration file:
      1. Add a new directory “/etc/udev/rules.d/” and name it “70-u2f.rules”.
      2. Add the following text:
        ACTION!="add|change", GOTO="u2f_end"

        # GoTrust Idem Key
        KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="1fc9|32a3", ATTRS{idProduct}=="f143|3201", TAG+="uaccess"

        LABEL="u2f_end"
        Note: If there was an already existing file, do not delete the original content, only add new.
      3. Restart your system.
    • Original directions in English, including the configuration file for download, can be found here.
  • My security key cannot be added to account or suddenly stopped working
    1. Use a Google Chrome browser (latest stable release) and visit https://webauthn.me/debugger.
    2. Insert security key to the USB port.
    3. At the bottom of the page, check the attestation box and in the drop-down list select direct.
    4. Click Register.
    5. Use the security key and allow the website to access your security key.
    6. If the key works, a new Output section appears under the Register button. Click DOWNLOAD (JSON).
    7. Send the downloaded .json file to our technical support at podpora@mojeid.cz

Before contaction mojeID supprt, please find out following information and send it to the e-mail podpora@mojeid.cz. Giving us this information will speed up the diagnosis and solve your problem faster.

  • Your mojeID username
  • Type of operating system
    • Computer: Windows, macOS, Linux, ... and its particular version (Windows 10, macOS Catalina, Ubuntu 20.04, ...)
  • Type of browser, where you tried the action (Chrome, Firefox, Opera, Safari, ...) and its particular version
  • Type of used security key
    • Hardware key: IdemKey, Yubico Security key NFC, ...
    • System key: Android, Windows Hello, ...
  • Description of the action you did or wanted to do
  • Screenshot of the error
  • Time when it happened

If you have any questions or comments concerning mojeID, contact us at podpora@mojeid.cz or call the technical support of the CZ.NIC Association, the administrator of the domain register, at +420 731 657 660 or +420 222 745 111 (24/7).