Digital Certificate vs Cl@ve: Why the Certificate Is the Better Choice
When you start interacting with Spanish government portals, two names keep appearing: the Certificado Digital and Cl@ve. Both are digital identity systems that let you access the Agencia Tributaria, the Seguridad Social, the DGT, and dozens of other government platforms. On the surface, they look like two paths to the same destination. In reality, they are not equal, and for foreign residents in Spain, the difference matters. The Certificado Digital works everywhere, all the time, for everything. Cl@ve works in some places, some of the time, for some things. This blog explains why the Certificado Digital is the only identity tool we recommend, and why Cl@ve is not the shortcut it appears to be.
What the Certificado Digital is
The Certificado Digital (officially the Certificado de Persona Física) is a digital certificate issued by the FNMT (Fábrica Nacional de Moneda y Timbre), Spain's national mint and official certificate authority. It is a cryptographic file that you install in your web browser (or on your phone via the FNMT mobile app). Once installed, it proves your identity to any Spanish government portal that supports electronic access. Think of it as a digital version of your passport that lives in your browser and automatically identifies you when you visit a government website.
The Certificado Digital is paired with Autofirma, the government's official digital signing application. Together, they let you not only access government portals but also sign and submit documents electronically. Filing tax returns, submitting Digital Nomad Visa applications through the UGE-CE, registering as autónomo, modifying your Seguridad Social contributions, checking your medical appointments, and requesting certificates from the Registro Civil are all done with the Certificado Digital and Autofirma.
What Cl@ve is and where it falls short
Cl@ve is a separate digital identity platform managed by the Secretaría General de Administración Digital. It comes in two versions: Cl@ve PIN (a temporary code sent to your phone, valid for a few minutes) and Cl@ve Permanente (a persistent password that you set up once and use ongoing). Both let you access some government portals for some tasks. Cl@ve is simpler to set up than the Certificado Digital, which is why it appeals to people who want a quick solution.
The problems start when you actually try to use Cl@ve for serious administrative tasks. Cl@ve does not let you sign documents electronically. It is an authentication system (it proves who you are) but not a signing system (it cannot put a legally binding signature on a form). This means you cannot use Cl@ve to submit a Digital Nomad Visa application, file an annual tax return that requires a signature, or sign and submit most TGSS forms for autónomo management. You can log in and view information, but you cannot complete the transaction.
The second problem is availability. Not all government portals accept Cl@ve. Many do, but the ones that matter most for foreign residents (the UGE-CE portal, certain Agencia Tributaria processes, some Seguridad Social modifications) often require the Certificado Digital specifically. When a portal says "Certificado Digital o Cl@ve" in its access options, it usually means Cl@ve works for viewing but the Certificado Digital is needed for submitting.
The third problem is specific to foreign nationals. Cl@ve Permanente requires video verification to set up, and this video verification service is not available to non Spanish nationals. If you do not hold a Spanish DNI (the national ID card for Spanish citizens), you cannot complete the Cl@ve Permanente registration through the standard video call process. You can still get Cl@ve Permanente by visiting a government office in person (Hacienda, Seguridad Social, or a municipal office that offers the service), but that defeats the convenience advantage that Cl@ve is supposed to provide.
Why the Certificado Digital wins for foreign residents
The Certificado Digital has none of the limitations above. It works for both authentication (logging in) and signing (submitting documents). It is accepted by every Spanish government portal without exception. And the registration process, while slightly more involved than Cl@ve, is straightforward for foreign nationals: you request a code online from the FNMT website, verify your identity in person at a registration office (typically a Hacienda office or a Seguridad Social office) with your passport and NIE, and then download and install the certificate in your browser. The entire process takes one to two days.
Once installed, the Certificado Digital is universally useful. Every interaction with the Spanish state that can be done online can be done with the Certificado Digital. There is no portal that accepts Cl@ve but not the Certificado Digital. There are many portals that accept the Certificado Digital but not Cl@ve. The Certificado Digital is the superset; Cl@ve is the subset. If you are going to set up one digital identity tool, set up the one that works everywhere.
What you can do with the Certificado Digital
The list is long, but these are the interactions that matter most for foreign residents in Spain. Filing quarterly and annual tax returns at the Agencia Tributaria (Modelo 303 for IVA, Modelo 130 for IRPF advance payments, Modelo 100 for the annual return, Modelo 036 for census registration changes). Submitting Digital Nomad Visa applications through the UGE-CE portal. Registering as autónomo at the TGSS (alta, baja, and contribution base modifications). Checking and downloading your Seguridad Social contribution history (Informe de Vida Laboral). Requesting your empadronamiento certificate online (in municipalities that support electronic requests). Checking and booking medical appointments through the regional health service portal. Requesting criminal background certificates (Certificado de Antecedentes Penales) from the Ministry of Justice. Paying TASA fees online. Checking the status of your RESPER verification at the DGT during a driving licence exchange. Signing and submitting recurso (appeals) electronically.
Every one of these tasks requires the Certificado Digital. Some also accept Cl@ve for the viewing step, but the submission step almost always requires the certificate.
How to get the Certificado Digital
The process has three steps. First, you request a solicitud (application code) on the FNMT website (fnmt.es). You enter your NIE number and an email address, and the FNMT sends you a code. Second, you verify your identity in person at a registration office. You bring your passport, your NIE document (white certificate or green card or TIE), and the solicitud code. The officer verifies your identity and approves the request. Third, you return to the FNMT website (within 24 hours of verification), enter your code, and download the certificate. You install it in your browser's certificate store. On Windows, it goes into the Windows Certificate Store. On macOS, it goes into the Keychain. On Firefox, it goes into the browser's own certificate manager.
The most common registration offices are Hacienda (Agencia Tributaria) offices and Seguridad Social offices. Some municipal offices (ayuntamientos) also offer the service. The in person visit takes five to ten minutes. There is no fee. The Certificado Digital is free.
The certificate is valid for four years from the date of issuance. Before it expires, you can renew it online without another in person visit (provided you renew before the expiry date). If you let it expire, you must start the process from scratch with a new in person verification.
The mobile option
The FNMT offers a mobile app (available for Android and iOS) that can store your Certificado Digital on your phone. This is useful for accessing government portals from your phone and for certain in person situations where an official asks you to identify yourself digitally. However, for tasks that require Autofirma (signing and submitting documents), the desktop browser version is more reliable. We recommend installing the certificate in both your desktop browser and the FNMT mobile app so you have full flexibility.
Common mistakes that delay the process
Using the wrong browser. The FNMT website and the certificate download process work best in Google Chrome or Mozilla Firefox. Safari on macOS can have compatibility issues with the certificate installation. If the download step fails, switch browsers before troubleshooting further.
Forgetting the 24 hour window. After your in person verification, you must download the certificate within 24 hours (some sources say 48 hours, but 24 is the safe limit). If you miss the window, the solicitud code expires and you need to start over with a new request and a new in person visit.
Not exporting a backup. Once installed, the Certificado Digital lives in your browser. If your computer crashes, you change browsers, or you get a new laptop, the certificate is gone unless you exported a backup. Export the certificate as a .p12 or .pfx file immediately after installation and save it somewhere safe (a USB drive, a cloud storage service, or both). This backup lets you reinstall the certificate on any device without repeating the in person verification.
Trying to use Cl@ve instead. Many people start with Cl@ve because it seems easier, hit a wall when they need to sign a document, and then have to set up the Certificado Digital anyway. Save yourself the detour. Start with the Certificado Digital from day one.
FAQ
Get your Certificado Digital set up the right way
Our module walks you through the FNMT request, the in person verification, the download, the browser installation, and the Autofirma setup.
Moving to Spain made simple.
