Mobile navigation Search icon

Access to public administration services

As a mojeID user, you can use your mojeID account to access many public administration services (i.e., link your account with NIA ‒ National Point for Identification and Authentication).

Why access public administration services using mojeID?

  • You gain access to Citizen Portal (online services such as driver's score, confirmation of study, electronic prescription, extract from the criminal register and trade register, ...)
  • You can submit tax returns online, gain overview of pension insurance or incapacity for work any time, ...
  • If you have a data box, you can log into it more comfortably

Link to the government services is available only to the citizens of the Czech republic (non-entrepreneurs), who have a permanent residence address in the Population Register.

List of all provided services can be found here: https://info.eidentita.cz/sep/

  • Your mojeID account.

    • If you do not have an account, you can create it here.

  • To have first name and last name, permanent address, e-mail and phone filled in.

  • Security key.

    • List of certified security keys with the option to sort them by security level can be found here.

    • Certification level of your security keys can be found in Settings Two-factor authentication Security key.

  • Identity verification at the Czech POINT office (in case you do not use eObčanka). Identity verification has to be done even with already validated accounts.

In order to link mojeID to government services (NIA), you need to have your account secured with a security key of level FIDO_CERTIFIED_L1 or higher. We recommend securing your account with multiple security keys. They serve as a backup in case one of them is lost.

Security keys that can be used to access public administration services (with "substantial" level of security, according to NIA):

  • Hardware keys with certification FIDO_CERTIFIED_L1 (Level 1) or higher

  • Mobile device with operating system Android 7.0 or higher (system security key). The device must have an active screen lock - PIN, fingerprint, face recognition... You then use this mobile device to access mojeID.

  • Windows Hello (system security key) is a way of authenticating a user on devices using operating system Windows 10. For the service to work, the device must have a PIN, fingerprint reader or face recognition protection set up. Windows Hello is available only in latest versions of Windows 10.

  • Recommendation: For the connection to public administration services to work correctly, it is necessary to allow mojeID website access to your security key while adding it.

  • If there is already a device with added security key (Android, Windows Hello), it is necessary to add the new security key on this device.

  • Recommendation: Use only one type of system security key to access public administration services. If you use only Android or Windows Hello as system security key to access public administration services (i.e. you do not use standalone hardware security key), login is always linked to the particular device (mobile phone, tablet or computer). It will not be possible to log in to public administration services and mojeID account settings from other devices. We recommend using Windows Hello on notebook/PC rather than Android.

It is possible to link more security keys to government services. . All security keys which you want to link to government services must have certification of Level 1 or higher.

We recommend adding the security keys to mojeID account using Google Chrome. Always make sure you have the latest stable (non-beta) version.

We cannot guarantee that the security keys will work in other browsers.

The process of linking may vary depending on whether you already have eObčanka (electronic ID card) linked to government services or not. If you do, the process is easier. You do not need to visit the Czech POINT office, because your identity will be verified via the eObčanka.

 

Link to government services must be always confirmed by logging in with a password and security key. In this case, you cannot use a certificate to log in.

 

Process without eObčanka - follow in case you do not own an eObčanka already linked to government services:

  1. Go to Settings.

  2. Secure your mojeID account with a security key in Two-factor authentication Security key.

  3. Go back to Setting. In the Link to government services (NIA) section, click Set.

  4. Click Link with NIA ‒ you will be prompted to log in again.

  5. In the Link to government services (NIA) section, choose Visit Czech POINT office and then click Verify.

  6. Print the displayed document and visit any Czech POINT office. Map of all Czech POINT offices can be found here.

  7. As soon as the request is processed (it may take a few days), you will receive an e-mail.

  8. After receiving the e-mail, log into your account, go to Settings and follow one of these steps:

    1. In the Validation section click Finish validation for NIA and pair your account.

    2. In the Link to government services (NIA) section click Set.

  9. A table with personal information will be shown. If the data provided by the government is different from the data in your account, it will be updated by clicking the Complete connection to NIA.

  10. Wait a moment before the connection is completed.

  11. If everything is OK, you will be redirected to the Settings and see a message Nia pairing complete at the top of the page.

  12. After successful linking to governemnt services, personal data handed over from the Citizen registry will be locked in your profile (first name, last name, birth date, permanent address). The Organization field will also be locked ‒ link to the government services is for natural non-business persons only. Contact information in your account will be now automatically updated from the Citizen registry.

The process of linking may vary depending on whether you already have eObčanka (electronic ID card) linked to government services or not. If you do, the process is easier. You do not need to visit the Czech POINT office, because your identity will be verified via the eObčanka.

 

Link to government services must be always confirmed by logging in with a password and security key. In this case, you cannot use a certificate to log in.

 

Process with eObčanka ‒ follow in case you do own eObčanka already linked to government services:

  1. Go to Settings.

  2. Secure your mojeID account with a security key in Two-factor authentication Security key.

  3. Go back to Setting. In the Link to government services (NIA) section, click Set.

  4. Click Link with NIA ‒ you will be prompted to log in again.

  5. In the Link to government services (NIA) section, choose Use an existing authentication mean (eObčanka) and then click Verify.

  6. You will be redirected to the NIA portal. Choose eObčanka as a login option.

  7. Give consent with the usage of personal data.

  8. A table with personal information will be shown. If the data provided by the government is different from the data in your account, it will be updated by clicking the Complete connection to NIA.

  9. Wait a moment before the connection is completed.

  10. If everything is OK, you will be redirected to the Settings and see a message Nia pairing complete at the top of the page.

  11. After successful linking to the governemnt services, personal data handed over from the Citizen registry will be locked in your profile (first name, last name, birth date, permanent address). The Organization field will also be locked ‒ link to the government services is for natural non-business persons only. Contact information in your account will be now automatically updated from the Citizen registry.

If you have an account connected to government services, certain data in your profile cannot be changed (first and last name, birth date, permanent address). These data (except for the Organization field) are automatically updated from Citizen registry. This measure serves as a protection against loss of validation, which is necessary for the link to government services to be possible.

Some devices are not fully compatible and cannot be used as security keys. At the moment, this applies for example to Apple mobile devices.

You can find a list of recommended security keys in the chapter Security keys and level of assurance.

  1. Use a Google Chrome browser (latest stable release) and visit https://webauthn.me/debugger.
  2. Insert security key to the USB port.
  3. At the bottom of the page, check the attestation box and in the drop-down list select direct.
  4. Click Register.
  5. Use the security key and allow the mojeID website to access your security key.
  6. If the key works, a new Output section appears under the Register button. Click DOWNLOAD (JSON).
  7. Send the downloaded .json file to our technical support at podpora@mojeid.cz

Once you have requested identity verification via Czech POINT office (using the form Data provision from the Register of inhabitants to another person) please wait for the confirmation e-mail. The request is usually processed in about 1-2 business days.

Then please sign in to your account and confirm the identity verification.

After logging into your account, go to Setting tab, in the section Access to public administration services click on the Get access button. Then click on the Complete button to finish the process of accessing public administration services.

If the confirmation e-mail does not arrive after a few days, we are probably not able to match the request ID. Verify once again that the request ID on the confirmation is correct. If not, you must go to Czech POINT again. If the identifier is correct, please contact our technical support ( e-mail podpora@moje.cz or phone +420 222 745 111).

  • Message Cannot disable authenticator. / Nepodařilo se zrušit autentifikační prostředek.
    • If you see this message when trying to disable a security key connected to public administration services, it means the public administration services systems are currently not running. Please wait until they start running again and then try to disable the security key again.
    • During public administration systems outage it will not be possible to cancel the connection of your mojeID account. It will not be possible to remove security keys connected to the public administration services nor to remove them by resetting the two factor security using the link at the login page.
  • Message It is not possible to complete the access to public administration services. / Není možné dokončit proces zpřístupnění služeb veřejné správy.
    • If you see this message when trying to pair your account, it means the public administration services systems are currently not running. Please wait until they start running again.
    • Unfortunately, in case of public administration services outage, it is possible that you will not be able to confirm an identity verification request already processed by Czech POINT and that the request to access public administration services will be canceled. You will have to wait until the public administration services work again, create the pairing request again and repeat the Czech POINT office visit with a new request for identity verification.

There are several ways to unlink you account from the government services.

 

If you want to link your account again in the future, you will have to go through the whole process again (including a potential Czech POINT visit).

 

  1. Unlink via mojeID account

    1. Login to your mojeID account.

    2. Go to Settings.

    3. In the Link to government services section click Set.

    4. Click Detach from NIA – a new login will be required as a confirmation.

    5. After logging in, your link to government services will be cancelled, but the account will still be secured with a security key and will remain validated.

  2. Unlink by removing second factor authentication (security key) in your account

    1. Login to your mojeID account.

    2. Go to Settings.

    3. In the Two-factor authentication section click Set.

    4. In the Security key section click Set.

    5. Find the token(s) linked to NIA, click Remove and confirm – new login will be required as a confirmation.

    6. After logging in, your security key will be removed and the link to government services will be cancelled.

  3. Unlink by resetting the two-factor authentication login

    1. While logging into mojeID, click the Is your two factor authentication not working? link.

    2. Enter the control code.

    3. Enter PIN1 (from e-mail), PIN2 (from SMS), password to your mojeID account and press Remove.

    4. This way, all two-factor authentication methods will be removed from your mojeID account and your link to government services will be cancelled.

  4. By calling the helpdesk phone line (operating 24/7) ‒ in case of security keys loss or suscpicion of misuse of the mojeID account

    1. Call the number +420 222 745 111 or +420 731 657 660.

    2. Helpdesk will ask you for several details from your profile (first name, last name, birth date, permanent address, e-mail, telephone) to verify your identity.

    3. If everything checks out, helpdesk will unlink your account from the government services.

    4. This way, your account will no longer be linked to government services. Your account will still be secured with two-factor authentication.

  5. Reset of the login by verified form

    1. Download and fill the formulář Žádost o reset hesla v MojeID (only in Czech language).

    2. Have it verified and send it to our office. What to do it is described here.

    3. After the request is processed, login to your mojeID account is reset. All two-factor authentication methods and link to government services are removed.

  • Apple devices
    • Some Apple devices cannot be used as a system security key. It will not be possible to access public administration services with mojeID account using these devices.
  • Access of mojeID website to your security key
    • If the mojeID website is not allowed access to your security key in your browser, the certification of your security key might not be identified. Because of this, the key will not work for connection to the public administration services.
  • Docking station and extension cables
    • We recommend connecting the security key to your device directly. The security key might not work properly if you use docking station or extension cable.
  • Windows Hello and security keys
    • We do not recommend using Windows Hello in combination with physical security key. Use Windows Hello only as a standalone system security key. More about types of security keys can be found in the chapter Security keys, settings and level of assurance.
  • Up-to-date browser and operating system
    • We strongly recommend using only the latest stable (not beta) version of your browser and keeping your operating system updated. An obsolete version of a browser is one of the most common causes of the security key not working or being uncertified (uncertified security keys cannot be used to access public administration services).
  • Using Android and Windows Hello as system security key
    • Use only one type of system security key to access public administration services. If you use only Android or Windows Hello as system security key to access public administration services (i.e. you do not use standalone hardware security key), login is always linked to the particular device (mobile phone, tablet or computer). It will not be possible to log in to public administration services from other devices. We recommend using Windows Hello on notebook/PC rather than Android.
  • Recommended browsers for adding security keys
    • We recommend adding the security keys to mojeID account using Google Chrome. Always make sure you have the latest stable version (not beta). We cannot guarantee that the security keys will work in other browsers.
  • Message Registration failed, incorrect data from security key. 
    • If you use a system security key (mobile phone, tablet) and you see this message, it means your device sent the required data out of specification in the wrong format. In this case, the problem is probably on the side of device manufacturer. Please, use different device or hadrware security key. You may also contact the device manufacturer and ask for a fix.
  • Non-functioning security key GoTrust Idem Key on Ubuntu version 18
    • It is possible that security key GoTrust Idem Key will not function on operating system Ubuntu 18 (or at other OS based on same core).
    • Method to make it work by adding and UDEV configuration file:
      1. Add a new directory “/etc/udev/rules.d/” and name it “70-u2f.rules”.
      2. Add the following text:
        ACTION!="add|change", GOTO="u2f_end"

        # GoTrust Idem Key
        KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="1fc9|32a3", ATTRS{idProduct}=="f143|3201", TAG+="uaccess"

        LABEL="u2f_end"
        Note: If there was an already existing file, do not delete the original content, only add new.
      3. Restart your system.
    • Original directions in English, including the configuration file for download, can be found here.

Before contaction mojeID supprt, please find out following information and send it to the e-mail podpora@mojeid.cz. Giving us this information will speed up the diagnosis and solve your problem faster.

  • Your mojeID username
  • Type of operating system
    • Computer: Windows, macOS, Linux, ... and its particular version (Windows 10, macOS Catalina, Ubuntu 20.04, ...)
  • Type of browser, where you tried the action (Chrome, Firefox, Opera, Safari, ...) and its particular version
  • Type of used security key
    • Hardware key: IdemKey, Yubico Security key NFC, ...
    • System key: Android, Windows Hello, ...
  • Description of the action you did or wanted to do
  • Screenshot of the error
  • Time when it happened

If you have any questions or comments concerning mojeID, contact us at podpora@mojeid.cz or call the technical support of the CZ.NIC Association, the administrator of the domain register, at +420 731 657 660 or +420 222 745 111 (24/7).