Smart-ID QR Code and App-to-app Communication – Redefining Mobile Authentication

Smart-ID introduces a new QR code and app to app communication authentication feature, streamlining the login process by eliminating the need to enter personal codes, or compare confirmation codes, thus enhancing both speed and security for end-users and e-service providers. The new feature is already available in Belgium, with expansion to the Baltics and other countries scheduled for the second quarter of 2025.

Users with the latest version of Smart-ID app get access to QR code and app to app communication authentication only in e-services that have upgraded their authentication solution to Smart-ID new API: simply open the Smart-ID app’s built-in camera, scan the QR code for e-service login, and enter your PIN. With app-to-app communication: simply open the e-service login page on mobile phone or inside e-service app and select from there login with Smart-ID app and enter your PIN.

To guarantee highest security, the QR codes should be scanned within the Smart-ID app. This measure prevents unauthorized access and verifies the QR code’s authenticity by Smart-ID app.

For iOS users, the upcoming Smart-ID experience change is even more important – after authentication, Smart-ID automatically closes and redirects you back to the app where the authentication was initiated.

The QR code authentication is accessible exclusively through e-services that have integrated Smart-ID API version 3. This means that the new feature will become available only after e-services activate the feature in the new API version. This move ensures seamless compatibility with the new login mechanism and is a one-time upgrade that providers must undertake to offer their users the benefits of increased security and a smooth authentication experience. We have made available comprehensive guidance and robust technical support to assist with transition, all of which will be here.

Instead of upgrading the direct integration to Smart-ID API version 3, e-services could also consider another of our new solutions – Authentigate. This is an identity verification and data-sharing platform, combining online authentication with Smart-ID, Mobile-ID and Estonian ID card with single integration. New Smart-ID features available via API version 3 are automatically included there once they are available. Helping businesses to comply with various regulations like GDPR, KYC, and PSD2, Authentigate enables multi-country operations and offers its users transparent control over their data.

As always, our commitment to user convenience does not come at the expense of security. The QR code functionality is fortified with several security measures, including dynamic QR codes that are refreshed periodically to resist replay and misuse. For more information, visit our FAQ page or contact our support team.