EU Digital Identity Wallet: what changes for digital signing by the end of 2026?

By the end of 2026, every EU member state must offer a digital identity wallet

The eIDAS 2.0 regulation sets the date: by December 2026, every member state must offer its residents at least one certified European Digital Identity Wallet. An app on your phone for identifying yourself, sharing data and signing documents, anywhere in Europe. This article covers where the rollout stands, what the wallet changes for digital signing, and what your organisation does and does not need to do now.

eIDAS 2.0: what changes for digital signatures in Europe? explains the regulation itself. This article is about the wallet and the deadlines that are now approaching.

What is the EU Digital Identity Wallet?

The wallet is an app, issued or recognised by the government, holding your verified identity data. You use it to:

• identify yourself online and in person, at the highest level of assurance;
• share data without revealing more than necessary, for example only that you are over 18;
• present credentials an organisation has linked to your identity, such as a diploma, a driving licence or the authority to act on behalf of a company;
• sign documents with a qualified electronic signature.

That last point is the heart of it for signing. The wallet carries a qualified certificate, so you create a qualified signature (QES) from your phone, with no card or USB token. A QES is legally equivalent to a handwritten signature throughout the EU.

The timeline as it stands today

• December 2026: every member state must offer at least one certified wallet. Public bodies must accept the wallet as a login method from then on.
• 2027: the Netherlands releases the NL Wallet. The government is building it on the existing DigiD infrastructure, with the Dutch Authority for Digital Infrastructure as certifying body. National availability moved from the end of 2026 to 2027 after the Advisory Council on IT Assessment concluded in 2025 that the pilots were too limited to guarantee a robust system.
• December 2027: the acceptance obligation for the private sector takes effect. Companies that are legally or contractually required to use strong authentication, including banks, insurers, energy and telecom companies, transport operators, healthcare and education, must accept the wallet. Micro and small enterprises with fewer than 50 employees are exempt.
• December 2027: citizens can use the wallet to create a qualified signature free of charge for private use.

The technical implementing rules have been adopted, in November 2024 and again in the summer of 2026. The architecture is fixed and suppliers can build.

What changes for digital signing?

Identification becomes stronger and simpler. Today you verify a signer by email, SMS, iDIN or eHerkenning. The wallet joins those methods, at the highest level of assurance and usable across Europe. A German or French signer will identify with their own national wallet, with nothing extra for you to set up.

The qualified signature becomes ordinary. Today a QES requires a personal or professional certificate from a recognised trust service provider, such as KPN or Cleverbase. That remains, and stays the route for professional use. On top of that, every citizen gets a QES in their wallet. Expect customers and employees to ask for it from 2027, especially for mortgages, insurance, powers of attorney and government processes.

Authority becomes verifiable. The wallet can hold an attestation that someone is authorised to sign on behalf of an organisation. That removes a step that often happens outside the signing process today: checking whether the signer is actually allowed to sign.

What does not change: the three signature levels remain, as does the rule that the level must match the importance of the document. For most business contracts, an advanced signature (AES) with identity verification remains the workhorse. See Is an electronic signature legally valid? for the rules per level.

What should your organisation do now?

Are you covered by the acceptance obligation? That is the first question. If you are a bank, insurer, healthcare provider, educational institution, energy or telecom company or transport operator with more than 50 employees, you must accept the wallet as a login method by the end of 2027. That requires registering as a relying party with the Dutch government and integrating with the wallet. The register is expected at the end of 2026 or the beginning of 2027.

Not covered? Then there is no obligation, but there is an expectation. Customers who log in with the wallet at their bank and municipality will expect the same from you. Make sure your signing platform can add the wallet as an identification method as soon as it is available, alongside the methods you use today.

Already on an eIDAS-compliant platform? Then nothing needs rebuilding. The signatures you create today remain legally valid, the audit trail remains evidence, and the wallet is added as an extra method. ValidSign already supports iDIN, eHerkenning, SMS and qualified certificates from KPN and Cleverbase, and will add the wallet as soon as the Dutch and European wallets become available.

Three things to remember

1. December 2026 is the European deadline for the wallet; the Netherlands delivers the NL Wallet in 2027.
2. December 2027 brings the acceptance obligation for large companies in regulated sectors, and free QES for citizens.
3. Your current digital signatures remain valid. The wallet is added, it replaces nothing.

Want to know which identification method fits your documents? See identity verification at ValidSign or request a demo.