Czech digital identity: Bank iD, eID and which key opens which door

In many countries, logging in to the tax office means a user name, a password and a prayer. Czechia took another route. Rather than build one state password for everyone, it built a system in which several trusted organisations vouch for you, and your online bank is one of them. If you bank in Czechia, you may already hold a key to the state.

This explainer covers what the main options are, how they differ and the question that matters in the end: who sees what.

The architecture in plain terms

The state runs a National Identity Authority (Národní identitní autorita, NIA), which sits between you and the service you want to use. The service, say the tax portal, does not check your identity itself. It asks the NIA. The NIA sends you to one of the identity providers it recognises, you authenticate there, and the provider confirms to the NIA that you are who you say you are. The service receives a confirmation and the data you agreed to share, nothing more.

That design has a consequence worth stating: your tax office never sees your banking password, and your bank does not see what you do on the tax portal. Each party sees its own part.

Providers are graded by how strongly they verify you. The EU framework behind it distinguishes levels of assurance, and a service chooses the level it requires. A low-risk service may accept a weaker login. A service that handles sensitive data or legal filings asks for a higher level, which in practice means a second factor such as an app confirmation or a code.

The options

Bank iD. This is a banking identity scheme: you log in to a service with the same credentials and confirmation you use for internet banking. It is an identity service run by the banks, and the state accepts it for logging in to its services as well as private firms using it for identification. Your bank must take part, and you must have activated online banking. The bank asks you to confirm which data it may pass on, such as your name, date of birth and address, before it releases anything. For individuals the service is free to use.

State eID. Czech citizens receive an electronic identity on the chip of their identity card (občanský průkaz), activated with a PIN and used with a reader or a phone that reads the chip. Other groups of residents may have access to equivalent state-issued eIDs; check what applies to your residence document on the official identity site. Do not assume that a residence permit card gives you the same login.

Mobile identity apps. The state offers a mobile application that functions as an identity provider and as the home of electronic documents. Availability and features have been expanding, so check the current list.

Other private providers. A private association runs an identity service that people have used for years, and certified providers of electronic signatures also work as identity sources. They suit people without a Czech bank or a state eID. Verification can involve a visit to a registration point or a recognised remote method.

Which one should a newcomer use

For most foreign residents, the bank route is the quickest because it needs no extra document, only the online banking you probably set up in your first weeks. That is one more reason to read how to open a Czech bank account as a foreigner early in a stay.

The state eID route suits those who hold a document with an activated chip and are comfortable with a card reader or phone reading. Other private providers help when the first two do not apply, such as a resident whose bank does not take part in the scheme.

If your status gives you a choice, keep two methods: a bank login as the daily key and a second provider as a spare. When one fails because of a bank outage or a lost phone, the other is the fallback. People who rely on a single key learn this at the worst moment, usually the day before a filing deadline.

Data, consent and the data box

A recurring misunderstanding is that logging in with an identity "gives the state your banking data". It does not. What a service receives is an identity assertion and the attributes the service is entitled to ask for. The bank shows a consent screen before it releases them. Read it. If a service you have never heard of asks for your address and your date of birth, ask why.

One consequence deserves attention. A first login to certain state services with an electronic identity can lead to the creation of a data box, the state's electronic letter box, unless you opt out. Messages delivered there generally count as received when someone with access logs in, or after ten days if nobody does (Act No. 300/2008 Coll.; as of 2026; check the Ministry of the Interior). So the identity decision and the data box decision are connected. For the box itself, see how to set up a data box, and for what you can do with your identity once it works, how to use Czech public services online.

A hypothetical example shows how the pieces fit. A resident with a Czech bank account wants to check their social security record. They open the social security portal, choose their bank from the list, approve the data release on the bank's screen and arrive logged in. The whole route takes a couple of minutes and involves no new password. Another resident without a Czech bank would take the same steps through a different provider, and the service would not care which key was used, only that the provider is recognised and the level of assurance is high enough for the task.

What can go wrong

Phishing. Fake login pages that copy a bank are the main risk. Always begin from the official site, check the address bar, and treat any email or text that sends you a login link with suspicion. Real banks and the state do not ask for your full password or card details by message.

Lost phone. If your banking app lives on your phone, a lost phone is also a lost key. Know your bank's procedure for blocking access, and set up the second method before you need it.

A change of bank or status. If you close your account or change your status, the key can stop working. Check what is linked to it before you close anything.

Name mismatches. If your name on your bank record differs from the name on your residence document, the service may refuse the match. Transliteration is a common cause. Ask the bank to correct the record.

Using the same identity outside the state

Bank iD is also accepted by private services for identification, such as when you verify yourself with a company that must know its customers. This can replace a branch visit. The same consent screen appears, so the same discipline applies. For wider context on what documents Czech residents carry in daily life, see Czech ID documents and what foreigners carry.

Frequently asked questions

Is Bank iD run by the state?

No. It is an identity service run by the banks, which the state accepts as a recognised way to log in to its services. It is free for individuals.

Does my bank see what I do on the tax portal?

The bank confirms who you are. The service you use receives your identity data, not your banking data, and each side sees its own part of the process.

Does a residence permit card work as a state eID?

Do not assume so. Check the official identity site for the methods open to your type of document.

Do I need a Czech bank account?

Not necessarily, since other providers exist, but a bank login is the easiest route for most foreign residents.

Open your banking app this week and look for a setting that mentions identity or login to state services. If it exists, switch it on while nothing depends on it.

This is a general explainer, not legal or tax advice.