DigiD and Dutch online government services

Know what DigiD is before applying

DigiD is the personal digital identity used to log in to many Dutch government organisations and participating services in healthcare, education and pensions. It is not a residence permit, bank login, public email address or shared household account. Each person uses their own DigiD for matters connected to their identity.

Start at digid.nl by typing or saving the address yourself. A standard resident application requires a citizen service number (BSN), a Dutch municipal registration address and a phone. The activation letter is sent to the address recorded in the Personal Records Database (BRP). The official DigiD application instructions are the place to check the current process.

If the address or name in the BRP is wrong, correct the underlying record with the municipality instead of trying repeated applications. The registration and BSN guide explains the role of the municipality and why the number does not automatically create a DigiD account.

Apply and activate without creating a security gap

Use a phone number and email access that you control. Record the username through a secure method and choose a unique password. Follow the official activation process when the letter arrives, and do not send a photograph of the letter or activation code to a helper.

Enable the DigiD app or two-step login where available. DigiD’s secure-login guidance explains current options. Review how the app is moved or recovered before replacing a phone, and keep the contact details current.

If a partner, relative, accountant or care provider needs to act for you, do not give them the credentials. Use the official authorisation route appropriate to the service. Authorisation lets another person perform specified tasks without turning your identity into a shared password.

DigiD and MijnOverheid are different

DigiD proves who is logging in. MijnOverheid is a government portal containing personal information and services, including the Berichtenbox digital mailbox. Organisations can send official correspondence to that mailbox when the service is active for them.

After gaining access:

1. sign in through the address you entered directly;
2. review which organisations may use the Berichtenbox;
3. confirm notification details without assuming an email preview contains the full message;
4. set a recurring reminder to check the mailbox;
5. open the sending organisation’s own portal when action is required;
6. save decisions or receipts in a secure case file.

An email alert is not the legal document itself. Deadlines and instructions belong to the message in the authenticated service. If you do not understand a decision, contact the organisation named in it through the contact details on its official site.

Recognise fake DigiD messages

DigiD states that its emails, text messages and letters do not contain a link or QR code for logging in. DigiD staff also do not ask for a username, password or activation code. Its page on recognising fake messages shows what to do when a message is suspicious.

Treat these situations as warning signs:

• an unexpected message says access expires unless you log in through its link;
• a caller asks you to read out a code or approve an app action;
• a QR code opens a login page you did not request;
• a search advertisement imitates an official portal;
• someone offering help asks to control your screen or phone;
• the browser address is not the exact official domain you intended to visit.

Close the message, open a fresh browser window and navigate independently. If you already entered credentials, follow DigiD’s current recovery and reporting instructions promptly. Also review the account or service the attacker may have tried to access.

Use DigiD as part of a broader records routine

DigiD does not notify every organisation when you move, arrange a benefit or change employment. The municipality may pass an address change to several public bodies, but private banks, insurers, utilities and employers still maintain their own records.

Keep a list of cases with the organisation, reference number, submission date, requested evidence and next review date. Do not store raw identity documents inside an ordinary spreadsheet. The list should point to the secure file or official portal where the detail belongs.

Digital government becomes manageable when three habits are consistent: navigate directly, never share authentication, and check the authenticated mailbox instead of acting on the urgency of an incoming message.