Mobile navigation is open Mobile navigation is close
Search icon

Access to public administration services

As a MojeID user, you can use your MojeID account to access many public administration services (i.e., link your account with NIA ‒ National Point for Identification and Authentication).

Why access public administration services using MojeID?

  • You gain access to Citizen Portal (online services such as driver's score, confirmation of study, electronic prescription, extract from the criminal register and trade register, ...).
  • You can submit tax returns online, gain overview of pension insurance or incapacity for work any time, ...
  • If you have a data box, you can log into it more comfortably.

List of all provided services can be found here: https://info.identitaobcana.cz/sep/.

  • Your MojeID account.

    • If you do not have an account, you can create it here.

  • To have first name and last name, permanent address, e-mail and phone filled in.

  • Security key and Chrome browser (you can find more information in the next chapter Security keys, settings and level of assurance)

  • Verify your identity (at the Czech POINT office, via non-entrepreneur natural person's data box, via eObčanka or other authentication method). Identity verification has to be done even with already validated accounts.

  • Detailed manuals / videomanuals with step-by-step instructions (only in Czech)

Access to public administration services using MojeID is available only to the citizens of the Czech republic (non-entrepreneurs with permanent residence address) and for foreigners, who have a temporary residence or permanent residence address in the Population Register.

Note:

If you have temporary residence with a certificate (document) of the temporary residence, your personal data should be kept in the Registry of Inhabitants. If the Czech POINT staff has problems with the identification of your person when submitting the request, it is necessary to inform the staff that they have to identify you using different personal data. The employee selects this option in the form and then manually enters your data (first name, last name, date of birth) from the document you submitted. First and last name must be entered exactly as they are on the document, including diacritics.

In order to link MojeID to public administration services, you need to have your account secured with a security key of level FIDO_CERTIFIED_L1 or higher. We recommend securing your account with multiple security keys. They serve as a backup in case one of them is lost.

List of security keys registered in your account can be found on this link or by clicking Settings Two-factor authentication Set Security key / MojeID Klíč Set.

Security keys that can be used to access public administration services (with "substantial" level of security, according to NIA):

  • Hardware keys with certification FIDO_CERTIFIED_L1 (level 1) or higher

  • Mobile device with operating system Android 7.0 or higher (system security key). The device must have an active screen lock - PIN, fingerprint, face recognition... You then use this mobile device to access MojeID.

  • Windows Hello (system security key) is a way of authenticating a user on devices using operating system Windows 10+. For the service to work, the device must have a PIN, fingerprint reader or face recognition protection set up. Windows Hello is available only in latest versions of Windows 10 and 11.

  • Warning: Do not reset your device (to factory settings), do not remove screen lock (PIN, fingerprint, ...) and do not reinstall your operating system. Your system security key (Android, Windows Hello) will stop working and you will not be able to use it to access your MojeID accound or public administration services. If you use only this one key, you will lose access completely and will have to complete the whole pairing process again.

  • Recommendation:For the connection to public administration services to work correctly, it is necessary to allow MojeID website access to your security key while adding it.

  • If there is already a device with added security key (Android, Windows Hello), it is necessary to add the new security key on this device.

  • Recommendation: Use only one type of system security key to access public administration services. If you use only Android or Windows Hello as system security key to access public administration services (i.e. you do not use standalone hardware security key), login is always linked to the particular device (mobile phone, tablet or computer). It will not be possible to log in to public administration services and MojeID account settings from other devices. We recommend using Windows Hello on notebook/PC rather than Android.

  • Recommendation: While adding hardware security key on a computer with Windows 10+, you will first be prompted to enter PIN or fingerprint by a Windows Hello screen. You have to cancel this first screen. Adding the hardware security key is confirmed on the following screens. If you enter a PIN on the first screen, Windows Hello will be added as a security key instead of your hardware key. After adding the key, we recommend checking the List of registered security keys if the correct key was added.

  • Recommendation: If you receive the message Registration failed, incorrect data from security key,​​​ when adding the key, unfortunately your key cannot be added to the account (the data or the data format provided by the key is not valid). We recommend using the MojeID Klíč mobile application instead. Alternatively you can contact the key manufacturer or try another security key.

  • Recommendation: In your account in the List of registered security keys, you can find out, what type of key you are using. Click the security key name - here you can change the key name, additional information is located on the right side. If you see Key description: Unknown - you use an uncertified key or you denied MojeID access to the security key.

We recommend using several security keys. If you have more security keys, you can use them to access your account in case you lose one of them.

All security keys you want to use to access public administration services must have certification of Level 1 or higher.

While adding new security key, if you keep the box Use a security key to access public administration services checked, you will be able to use the key for this purpose right away. If you uncheck the box, it is possible to activate the  access to public administration services using this key later. All you need to do is go to Settings → Two-factor authentication → Security key, find the correct key and in the column Access to public administration services click Get. You will also need to verify your identity. The process is easier compared to the first time you add a security key to access public administration services. Just choose Using an existing authentication method and click Verify. On the eIdentity website choose MojeID from the list of providers, log in again using already paired security key, give consent to transfer data and click Complete to finish the process.

Recommendation: In your account in the List of registered security keys, you can find out, what type of key you are using. Click the security key name - here you can change the key name, additional information is located on the right side. If you see Key description: Unknown - you use an uncertified key or you denied mojeID access to the security key.

I want to use system security key Windows Hello and Android at the same time to access public administration services. How can I do it?

  • Buy a hardware security key with NFC. Add this key on the device you already use to access public administration services (if you use Hello on PC, add the key there).
  • Keep the box Use a security key to access public administration services checked - the new hardware security key will be automatically paired. Afterwards log into your MojeID account on mobile device using the NFC hardware security key. The key is already paired to the public administration services. In the settings add another security key, use fingerprint or screen lock to confirm adding the Android system security key, verify it using NFC hardware security key. Then you will be able to use your mobile device to access public administration services.

We recommend adding the security keys to MojeID account using Google Chrome. Always make sure you have the latest stable (non-beta) version.

We cannot guarantee that the security keys will work in other browsers.

The process of linking may vary depending on whether you own an authentication tool (eObčanka, Starcos card, NIA ID,...) already linked to public administration services or not. If you do have it, the process is easier and you will not have to visit a Czech POINT office.

Link to public administration services must be always confirmed by logging in with a password and security key. In this case, you cannot use a certificate to log in.

You can see our videomanual (only in Czech) or use the following method:

  1. Go to Settings.

  2. Secure your MojeID account in Two-factor authenticationSecurity key or app MojeID Klíč.

  3. Go back to Settings. In the Access to public administration services section, click Get access. Then choose a level of assurance.

  4. You will be prompted to log in again.

  5. Click Continue ‒ you will be prompted to log in again.

  6. In the Access to public administration services section, choose Visit a Czech POINT office and then click Show request.

  7. Print the displayed request or have it ready on your mobile and visit any Czech POINT office. Map of all Czech POINT offices can be found here.

  8. As soon as the request is processed, you will receive an e-mail.

  9. After receiving the e-mail, log into your account, go to Settings and in the Access to public administration services click Get access.

  10. A table with personal information will be shown. Click Complete to finish the process.

  11. Wait a moment before the pairing is completed.

  12. If everything is OK, you will be redirected to the Settings and in the Access to public administration services section a message "The option to log in to public administration services using MojeID is now enabled" will be shown.

  13. After successful pairing to public administration services, personal data handed over from the Citizen registry will be locked in your profile (first name, last name, birth date, permanent address). The Organization field will also be locked ‒ access to public administration services is for natural non-business persons only. Contact information in your account will be now automatically updated from the Citizen registry.

If you own an eObčanka already linked to the public administration services, you will not have to visit Czech POINT to verify your identity.

Link to the public administration services must be always confirmed by logging in with a password and security key. In this case, you cannot use a certificate to log in.

You can see our videomanual (only in Czech) or use the following method:
  1. Go to Settings.

  2. Secure your MojeID account in Two-factor authentication → Security key or app MojeID Klíč.

  3. Go back to Settings. In the Access to public administration services section, click Get access.

  4. Click Continue ‒ you will be prompted to log in again.

  5. In the Access to public administration services section, choose Using an existing authentication method and then click Verify.

  6. You will be redirected to the eIdentita.cz portal. Choose eObčanka as a login option.

  7. Give consent with the usage of personal data.

  8. A table with personal information will be shown. Click Complete to finish the process.

  9. Wait a moment before the pairing is completed.

  10. If everything is OK, you will be redirected to the Settings and in the Access to public administration services section a message "The option to log in to public administration services using MojeID is now enabled" will be shown.

  11. After successful pairing to public administration services, personal data handed over from the Citizen registry will be locked in your profile (first name, last name, birth date, permanent address). The Organization field will also be locked ‒ access to public administration services is for natural non-business persons only. Contact information in your account will be now automatically updated from the Citizen registry.

You can see our videomanual (only in Czech) or use the following method.

Warning: You can only use non-business natural person's data box with permanent address and you have to log in as an authorized person.

  1. Go to Settings.
  2. Secure your MojeID account in Two-factor authentication → Security key or app MojeID Klíč.
  3. Go back to Settings. In the Access to public administration services section, click Get access.
  4. Click Continue ‒ you will be prompted to log in again.
  5. In the Access to public administration services section, choose Use data box and then click Verify.
  6. Give consent with the usage of personal data and continue to the data box login page.
  7. Log in to your data box. Only an authorised person can log in and you can only use non-business natural person's data box.
  8. Send the prepared concept with a subject MojeID identity verification. The request is usually processed within an hour. As soon as the request is processed, you will receive a message to your data box and to your e-mail.
  9. After you receive the e-mail, log in to your MojeID account, go to Settings and in the Access to public administration services click Get access.
  10. A table with personal information will be shown. Click Complete to finish the process.
  11. Wait a moment before the pairing is completed.
  12. If everything is OK, you will be redirected to Settings and in the Access to public administration services section a message "The option to log in to public administration services using MojeID is now enabled" will be shown.
  13. After successful pairing to public administration services, personal data handed over from the Citizen registry will be locked in your profile (first name, last name, birth date, permanent address). The Organization field will also be locked ‒ access to public administration services is for natural non-business persons only. Contact information in your account will be now automatically updated from the Citizen registry.

Warning:

  • It is possible to request identity verification even with a data box of an organization or legal person. Unfortunately in this case the identity verification will fail and you will receive an appropriate message.
  • If you want to use an organization's data box to verify your identity and use MojeID to access public administraton services, you can do it by setting up a NIA ID. You can register to NIA ID using this form and then verify the request by logging in to your data box as an authorised person. You can then pair the activated NIA ID with your MojeID account.

If you have a MojeID account connected to the public administration services, certain data in your profile cannot be changed (first and last name, birth date, permanent address). These data (except for the Organization field) are automatically updated from Citizen registry.

If you are in the list of registered keys and in the column Public administration services is next to your security key message Not available you probably denied the MojeID website access to the information about your security key. To be able to use this key to access public administration services, you need to remove this key, add it again and allow MojeID website access to the information about your security key.

The key may also not be certified, or its manufacturer has requested a certification, but the process has not yet been completed. Uncertified keys or keys certified without a security level cannot be used for public administration services.

Once you have requested identity verification via Czech POINT office (using the form Data provision from the Register of inhabitants to another person) please wait for the confirmation e-mail. The request is usually processed within 10 minutes.

Then please sign in to your account and confirm the identity verification.

After logging into your account, click on the Complete button to finish the process of accessing public administration services.

If the confirmation e-mail does not arrive within one day, we were probably not able to match the request ID. Verify once again that the request ID on the confirmation is correct. If not, you must go to Czech POINT again. If the identifier is correct, please contact our technical support ( e-mail podpora@moje.cz or phone +420 222 745 111).

There are several ways to cancel access of you account to the public administration services. If you want to link your account again in the future, you will have to go through the whole process again (including a potential Czech POINT visit, if you do not have some other authentication method).

How to cancel the access?

  1. Log in to your MojeID account.
  2. Go to Settings.
  3. In the Access to public administration services section click Set.
  4. Click Remove access – a new login will be required as a confirmation.
  5. After removing access you will no longer be able to access public administration services using your mojeID, but your account will remain secured with a security key.

Other methods of removing access to public administration services:

Cancel access by removing paired security keys:

  1. Login to your MojeID account.
  2. Go to Settings.
  3. In the Two-factor authentication section click Set.
  4. In the Security key section click Set.
  5. Find the security keys linked to public administration services, click Remove and confirm – new login will be required as a confirmation.
  6. After logging in, your security key will be removed and the access to publuc administration services will be cancelled.

Unlink by resetting the two-factor authentication login:

  1. While logging into MojeID, click the Does your two-factor authentication not fucntion properly? link.
  2. Enter the control code.
  3. Enter PIN1 (from e-mail), PIN2 (from SMS), password to your mojeID account and press Remove.
  4. This way, all two-factor authentication methods will be removed from your mojeID account and your access to public administration services using MojeID will be cancelled.

By calling the helpdesk phone line (operating 24/7) ‒ in case of security keys loss or suspicion of misuse of the MojeID account:

  1. Call the number +420 222 745 111 or +420 731 657 660 .
  2. Helpdesk will ask you for several details from your profile (first name, last name, birth date, permanent address, e-mail, telephone) to verify your identity.
  3. If everything checks out, helpdesk will cancel access to public administration services.
  4. This way, your account will no longer paired to public administration services. Your account will still be secured with two-factor authentication.

Reset of the login by verified form:

  1. Download and fill the formulář Žádost o reset hesla v MojeID (only in Czech).
  2. Have it verified and send it to our office. What to do it is described here.
  3. After the request is processed, login to your MojeID account is reset. All two-factor authentication methods and access to public administration services are removed.
  • Apple devices as a system security key
    • Some Apple devices cannot be used as a system security key. It will not be possible to access public administration services with MojeID account using these devices.
  • Can I use hardware security key on Apple devices?
    • Yes, hardware keys can be used. Choose the correct type of connector (USB, Lightning) to connect to your device/devices. On mobile devices you can also use keys with NFC technology (if supported).
  • Access of MojeID website to your security key
    • If the MojeID website is not allowed access to your security key in your browser, the certification of your security key might not be identified. Because of this, the key will not work for connection to the public administration services.
  • Docking station and extension cables
    • We recommend connecting the security key to your device directly. The security key might not work properly if you use docking station or extension cable.
  • Windows Hello and security keys
    • We do not recommend using Windows Hello in combination with hardware security key. Use Windows Hello only as a standalone system security key. More about types of security keys can be found in the chapter Security keys, settings and level of assurance.
  • Up-to-date browser and operating system
    • We strongly recommend using only the latest stable (not beta) version of your browser and keeping your operating system updated. An obsolete version of a browser is one of the most common causes of the security key not working or being uncertified (uncertified security keys cannot be used to access public administration services).
  • Using Android and Windows Hello as system security key
    • Use only one type of system security key to access public administration services. If you use only Android or Windows Hello as system security key to access public administration services (i.e. you do not use standalone hardware security key), login is always linked to the particular device (mobile phone, tablet or computer). It will not be possible to log in to public administration services from other devices. We recommend using Windows Hello on notebook/PC rather than Android.
  • Recommended browsers for adding security keys
    • We recommend adding the security keys to MojeID account using Google Chrome. Always make sure you have the latest stable version (not beta). We cannot guarantee that the security keys will work in other browsers.
  • Do I really have to use Google Chrome?
    • It is enough to use Google Chrome browser for adding your security keys to your account (do not forget to allow MojeID website access to your security key).
  • Security key does not respond to touch
    • Make sure you touch your security key strong enough. If you have dry hands, the contact area on your key might have trouble registering your finger.
  • Message Registration failed, incorrect data from security key.
    • If you use a system security key (mobile phone, tablet) and you see this message, it means your device sent the required data out of specification in the wrong format. In this case, the problem is probably on the side of device manufacturer. Please, use different device or hadrware security key. You may also contact the device manufacturer and ask for a fix.
  • Message Cannot disable authenticator. / Nepodařilo se zrušit autentifikační prostředek.
    • If you see this message when trying to disable a security key connected to public administration services, it means the public administration services systems are currently not running. Please wait until they start running again and then try to disable the security key again.
    • During public administration systems outage it will not be possible to cancel the connection of your mojeID account. It will not be possible to remove security keys connected to the public administration services nor to remove them by resetting the two factor security using the link at the login page.
  • Message It is not possible to complete the access to public administration services. / Není možné dokončit proces zpřístupnění služeb veřejné správy.
    • If you see this message when trying to pair your account, it means the public administration services systems are currently not running. Please wait until they start running again.
  • Where to find details about my security key?
    • In your account in the List of registered security keys, you can find out, what type of key you are using. Click the security key name - here you can change the key name, additional information is located on the right side. If you see Key description: Unknown - you use an uncertified key or you denied mojeID access to the security key.
  • My security key is not supported because it cannot be identified
    • Some devices are not fully compatible and cannot be used as security keys. At the moment, this applies for example to Apple mobile devices.
    • You can find a list of recommended security keys in the chapter Security keys, settings and level of assurance.
  • Non-functioning security key GoTrust Idem Key on Ubuntu version 18
    • It is possible that security key GoTrust Idem Key will not function on operating system Ubuntu 18 (or at other OS based on same core).
    • Method to make it work by adding and UDEV configuration file:
      1. Add a new directory “/etc/udev/rules.d/” and name it “70-u2f.rules”.
      2. Add the following text:
        ACTION!="add|change", GOTO="u2f_end"

        # GoTrust Idem Key
        KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="1fc9|32a3", ATTRS{idProduct}=="f143|3201", TAG+="uaccess"

        LABEL="u2f_end"
        Note: If there was an already existing file, do not delete the original content, only add new.
      3. Restart your system.
    • Original directions in English, including the configuration file for download, can be found here.
  • My security key cannot be added to account or suddenly stopped working
    1. Use a Google Chrome browser (latest stable release) and visit https://webauthn.me/debugger.
    2. Insert security key to the USB port.
    3. At the bottom of the page, check the attestation box and in the drop-down list select direct.
    4. Click Register.
    5. Use the security key and allow the website to access your security key.
    6. If the key works, a new Output section appears under the Register button. Click DOWNLOAD (JSON).
    7. Send the downloaded .json file to our technical support at podpora@mojeid.cz

Before contaction MojeID support, please find out following information and send it to the e-mail podpora@mojeid.cz. Giving us this information will speed up the diagnosis and solve your problem faster.

  • Your MojeID username
  • Type of operating system
    • Computer: Windows, macOS, Linux, ... and its particular version (Windows 10, macOS Catalina, Ubuntu 20.04, ...)
  • Type of browser, where you tried the action (Chrome, Firefox, Opera, Safari, ...) and its particular version
  • Type of used security key
    • Hardware key: IdemKey, Yubico Security key NFC, ...
    • System key: Android, Windows Hello, ...
  • Description of the action you did or wanted to do
  • Screenshot of the error
  • Time when it happened

1. General information

MojeID Klíč is a mobile app on Android and iOS, which can be used to heighten a security of your MojeID account. You will confirm logging in with this app. MojeID Klíč can also be used to access public administration services (level “high”).

Download for Android

Download for iOS

Warning: In the browser where you are logged in the MojeID account, JavaScript must be enabled for the app to be correctly paired.

Note: You need to secure the app with PIN during setting up. If you enter wrong PIN five times while confirming request, the app will be blocked. You can unblock the app once every 24 hours. Unblocking can be done in the Settings (only if you have another two-factor authentication method and can log in), by contacting support at , or at .

Request to unblock MojeID Klíč app

If you cannot scan the QR code, you can use an Activation code instead. In the app, click the grey button How to activate and then Retype the code manually.

2. What to do if you want to replace a mobile device

  1. First you need to add another security key to your account and pair it with the public administration services. This way you will have a backup key paired with NIA and can remove and uninstall MojeID Klíč from your phone.  Your options are:
    1. You can buy a GoTrust Idem Key physical security key we recommend.
    2. If you have a computer with Windows 10, you can use Windows Hello as a security key.
    3. Add your Android phone as a system security key
  2. Use a non-entrepreneur natural person data box
    1. In the Citizen portal there is an easy way to make a data box.
    2. After setting up a data box, download an eGovernment app made by the Ministry of the Interior to your new phone. In the data box settings add an option to use this key to log in.
    3. Remove MojeID Klíč in your MojeID Account and intall it on your new phone
    4. In the Settings > Get access and choose data box. Affter logging in to the data box choose the option Log in via eGovernment key
    5. Follow the instructions in your data box. When the Státní správa základních registrů confirms your verification, your pairing is complete.

I want to use MojeID Klíč, but I do not have access to public administration services yet

  1. Log in to your MojeID account on a computer and in the Settings tab in the Two-factor authentication section click Set.

  2. In the MojeID Klíč section click Set.

  3. Download MojeID Klíč from App Store or Google Play.

  4. After installing the app, click Continue in your MojeID account.

  5. Open the app in your mobile device, choose Scan QR code and scan the QR from your computer screen.

  6. In the app choose a PIN and decide, if you want to use biometrics (fingerprint / face scan) to confirm requests.

  7. Click Continue in your MojeID account. You will be prompted to log in to your account, this will confirm the connection of your account to the application.

  8. An information will be shown in the app, that the app is active. Click Start using to finish adding the app.

  9. In the Settings in the Access to public administration services section click Get access.

  10. To access public administration services, use this guide (CZ only)

Detailed information about level “high” can be found on a separate page:

LEVEL “HIGH” SUPPORT PAGE

If you have any questions or comments concerning MojeID, contact us at podpora@mojeid.cz or call the technical support of the CZ.NIC Association, the administrator of the domain register, at +420 731 657 660 or +420 222 745 111 (24/7).