Spain kills the plastic id: digital dni goes live on 2 april
Spanish citizens can leave their wallets at home next week. The interior ministry has locked the launch date for the long-promised miDNI app: 2 April, 00:01, when the plastic card becomes optional for almost every everyday transaction.
The tech under the hood
Forget screenshots. The app stores a dynamic QR that refreshes every 30 seconds and pings the National Police back-end for verification. No internet? No problem: an offline cryptographic handshake still convinces the officer’s reader that you are you. The payload is not an image; it’s a COSE-signed JSON Web Token pinned to the secure element of Android or the Secure Enclave on iOS. In plain words: clone it and you face a 256-bit wall.
Registration is a one-time pain. Citizens need a DNIe chip, a 24-hour window, and either a PAD code mailed by the police or a visit to the nearest comisaría. Once inside, the Ministry claims the enrolment failure rate is below 0.7 %—better than most banking apps.
What still requires the plastic
Border crossings outside Schengen, voting stations and court appearances still demand the physical card. Car rental desks are split: Hertz and Sixt accept the QR; mom-and-pep shops in Galicia may not. The rule of thumb: if the business swipes, it accepts; if it photocopies, it refuses. Hotels, pharmacies, parcel shops and even nightclub bouncers have been trained since January—300,000 hand-held readers have been quietly shipped nationwide.
Privacy advocates are not cheering. The app requests location permission “to improve service”, a clause the interior ministry refuses to delete. The data retention decree says verification logs are wiped after 30 days, yet the same text allows “statistical extraction” without anonymisation. The Spanish data protection agency has already opened a preliminary file.
A domino for the eu stack
Madrid’s move plugs straight into the European Digital Identity Wallet architecture due in 2026. Brussels sources tell TechCurrent that Spain’s early rollout gives it leverage to shape the technical specs—particularly the revocation protocol that other countries will be forced to adopt. In practice, a Barcelona café will soon accept a German eID without extra hardware, but only because Spain wrote the reference code this spring.
The business upside is immediate. The tourism board estimates that 2.8 million check-ins a year will drop from three minutes to 18 seconds, shaving €46 million in staff costs. Banks are already lobbying to use the same QR for strong customer authentication, a shortcut that could retire the clunky coordinate cards Spaniards still keep in kitchen drawers.
Meanwhile, forgery gangs in Madrid’s Lavapiés are pivoting: WhatsApp rumours sell “cloned QR packs” for €200. The police answer with a single statistic: 87 arrests since February for attempted spoofing, zero successful clones so far. The cat-and-mouse game has simply moved from laminated plastic to elliptic curves.
On Tuesday night, millions will tap “download” and watch their wallets slim down by one card. The plastic DNI will not disappear; it will sleep in drawers like the floppy disk—still legal, mostly useless. Spain just gave the rest of Europe a live demo of how fast identity can dematerialise when the state stops asking for paper.