Have you found yourself needing to complete online procedures with the Spanish government and have questions about how to authenticate yourself? The advancement of digitalization in the public sector has led to the creation of new authentication systems, such as Cl @ ve PIN, Cl @ ve Permanente, Cl@ve Mobile and Cl@ve appManaging these methods can be complicated if you're new to them. In this guide, we've compiled everything you need to know to fully understand how they work, their differences, their advantages, and how to use them safely and efficiently in any digital transaction with the Public Administration.
What is the Cl@ve system and why is it essential?
Cl@ve is the official electronic identification system of the Public Administration in Spain., developed to simplify and protect citizen and professional access to the digital services of various public entities. Thanks to this system, you can authenticate in a unified manner across multiple portals, avoiding having to remember different passwords for each one or relying solely on a physical digital certificate.
Cl@ve is not just a system, but an entire platform that integrates several electronic authentication methods. You can choose the one that best suits the frequency and nature of your transactions. These are the main options:
- Cl @ ve PIN: Authentication using a temporary, one-time PIN. Perfect for occasional access or one-off transactions.
- Cl @ ve Permanente: User ID (DNI or NIE) and password, ideal for those who frequently use public online services. It offers enhanced security via SMS (OTP).
- Cl@ve Mobile: The latest alternative, supported by the Cl@ve app and the use of push notifications or QR code scanning. Very convenient and secure.
- Digital certificate or electronic DNI (DNIe): Integration with identification systems based on digital certificates, both in the cloud and installed on devices.
Prior activation in the Cl@ve system is required to use any of these methods. Registration can be basic or advanced and determines the access level and procedures you can choose from.
What is the Cl@ve app for and why should you install it?
La Cl@ve app, available for Android (from version 8) and iOS (from version 14)Cl@ve is the official tool that centralizes Cl@ve authentication methods in a single mobile environment. Its goal is to streamline identification and electronic signature in online procedures, without relying on SMS or remembering multiple passwords. This application unifies functions that were previously separated into several apps, such as Cl@ve PIN and those related to electronic signatures.
Why is it advisable to download it?
- It offers greater security and speed to validate your identity.
- Allows receiving push notifications snapshots to validate access or electronic signatures.
- Facilitates authentication through QR codes, eliminating errors when typing data.
- It includes enhanced authentication methods, such as fingerprint, mobile PIN, or facial recognition, which provide additional protection.
- It enables the management and activation of all Cl@ve methods from your mobile phone.
If you were a user of the previous Cl@ve PIN app, the Cl@ve app maintains and improves all of its features, so the transition is seamless and without loss of service.
Essential requirements for using the Cl@ve app and registering in the system
- Be previously registered in Cl@veThis registration can be completed online (with a digital certificate, video call, or invitation letter) or in person at designated offices. For advanced procedures (such as centralized electronic signature), advanced registration is required.
- Have a compatible mobile phone that can run the Cl@ve app (Android 8 or higher, iOS 14 or later).
- During the initial setup process, you will need to:
- Enter your DNI/NIE and a valid ID number (validity date, issue date, or support number, depending on the document).
- Verify your identity via a code received via SMS, or using an electronic certificate if your device allows it.
- In the case of DNIe, the mobile phone must have NFC for activation.
Step-by-step installation and activation of the Cl@ve app
Installation
- Download the Cl@ve app from Google Play, Huawei AppGallery, or the Apple Store.
- Open the app for the first time and accept the privacy policy and terms of service.
Activation for users already registered in Cl@ve
- SMS activation: You will receive a 6-digit code on your mobile phone with a limited validity (5 minutes), which you must enter to link the mobile phone to the system.
- Activation using electronic certificateIf the certificate is installed on your phone, you can import it and use it as a secure mechanism. Unlocking will be done with a fingerprint, PIN, or pattern, depending on your settings.
- Activation with DNIeIf your phone is NFC-compatible, follow the app's instructions to hold your electronic ID card up to it, entering the PIN and PIN.
Register through the app (if you are not registered yet)
- Registration by video identificationAll you need is a camera, a microphone, and a good internet connection. The system will ask you to show your ID and your face to verify it's you.
- Registration with electronic certificateRecommended option if you already have a digital certificate installed or ported to your phone. It allows immediate access and advanced logging.
- Registration with DNIe. You need a mobile phone with NFC, the CAN, and the DNIe PIN.
- Face-to-face registrationYou can go to a Cl@ve registration office, where they will give you immediate access after verifying your identification.
Once you've registered or activated the app, your device is linked to receive authentication requests. You can only be logged in on one mobile device at a time per Cl@ve account.
How do I use the Cl@ve app depending on the procedure I need to complete?
The Cl@ve app allows for different forms of authentication, depending on the needs of the citizen and the administrative service requested:
Access via Cl@ve Mobile using QR code
- Choose Cl@ve Mobile when starting the online process on the website of the corresponding administration.
- A message will appear on the browser screen. unit’s QR code along with a three-digit verification code and a 5-minute timer.
- Open the Cl@ve app on your mobile and press "Scan QR code". Focus on the QR code on the monitor and check that the verification code and the agency match those on the application.
- Confirm authentication from your mobile phone. In many cases, you'll need to double-check using your fingerprint, unlock PIN, or pattern.
- You will receive an authentication success message and can continue with the process online.
Access via Cl@ve Mobile without QR
- Click the "Continue with Cl@ve mobile authentication without QR code scanning" option on the application's website.
- Enter your DNI/NIE and the verification information (validity date, issue date, or support number).
- You'll receive a notification from the app on your mobile phone confirming access, with the same enhanced validation steps.
- If you cannot complete this way, after 59 seconds the option to request the PIN by SMS.
Access via PIN via SMS (traditional Cl@ve PIN)
- Choose Cl@ve Móvil as your payment method.
- If you prefer, select "Cl@ve mobile authentication without QR code scanning." Enter your details, wait, and request your PIN via SMS. You will receive a 6-digit PIN with limited validity.
- Enter your PIN on the website and complete the process.
Differences and advantages between Cl@ve PIN and Cl@ve Permanente
Cl@ve PIN: one-time and temporary identification
Cl @ ve PIN It is designed for those who sporadically access public administration services. Its main feature is the use of a Single-use, short-validity PIN, generated in each session, and which can be received either in the Cl@ve app or by SMS, depending on preference or device availability.
- It does not require remembering one stable password.
- The PIN is valid for only a few minutes, increasing security and preventing possible fraudulent use.
- Ideal for occasional tasks: checking employment history, requesting certificates, filing income tax returns, among others.
- Convenient and easy for those who don't want to deal with permanent passwords.
Permanent Cl@ve: authentication for frequent users and advanced management
Cl @ ve Permanente It is aimed at people who carry out frequent administrative procedures or need to regularly sign electronic documents. It works with a username (DNI or NIE) and a password established by the user. This method can be reinforced in sensitive procedures by sending a one-time code (OTP) by SMS.
- Allows recurring access without relying on SMS reception or generating temporary PINs.
- It requires you to remember your password, but offers recovery processes in case you forget it.
- Advanced registration is recommended to access all features and electronic signature in the cloud.
- It offers double authentication for critical services of Social Security, the Tax Agency, the DGT, etc.
Main differences between Cl@ve PIN and Cl@ve Permanente
- Cl @ ve PIN It is temporary and intended for one-time access; it doesn't require remembering passwords, as the PIN changes with each use.
- Cl @ ve Permanente It uses fixed credentials (username and password), designed for routine access and advanced operations. For sensitive transactions, it adds an OTP factor sent via SMS.
- Both are integrated into the Cl@ve system, and you can choose the one that best suits your situation.
Where and when to use each access method?
Cl@ve allows you to identify yourself on all websites and procedures of the State Public Administrative SectorFrom filing your tax return, checking the status of your Social Security records, renewing your unemployment benefits, applying for benefits, accessing the DGT (Directorate General of Traffic) to check points on your license, or managing fines... All of these services accept Cl@ve authentication and usually offer the option to choose the identification method based on the user's preference.
- Cl @ ve PIN: Best suited for users who perform sporadic or simple tasks. Recommended if you don't want to memorize passwords or only log in a couple of times a year.
- Cl @ ve Permanente: Ideal for those who regularly use digital administration services and for those who need to electronically sign documents, as it allows for enhanced authentication in sensitive transactions.
- Cl@ve App and Cl@ve Mobile: They provide the most convenient and secure experience, as you only need to bring your mobile phone for any type of authentication or signature. Push notification and QR code validation greatly streamlines the process.
How to register and manage your Cl@ve account: key steps
- Access the official Cl@ve registration portalYou can choose between basic registration (receiving an invitation letter) and advanced registration (in person, with a digital certificate, electronic ID, or video call).
- Enter your personal data and choose the initial validation method.
- Select the level of access you need: basic for simple procedures or advanced for electronic signature and access to all agencies.
- Once registered, you can activate your account in the Cl@ve app or use it directly for online procedures.
Advanced management: password recovery, user switching, and security
Security is a fundamental pillar at Cl@ve. All sensitive processes (username or password change, access recovery, account deletion) always require double validation, usually through a OTP code Sent via SMS to the registered mobile phone. The system only allows changes if you can demonstrate control over the registered phone number, blocking potential fraud even if an attacker has discovered your username or password.
- In case of Forgotten password in Cl@ve PermanenteYou can request a new one as long as you have the activation code generated during advanced registration. If you don't have it, you'll need to register again.
- Unsubscribing is easy through the official portal, and you will always be required to provide two-factor authentication.
Cl@ve Firma: electronic signature with a digital certificate in the cloud
One of the most relevant advanced features of the Cl@ve system is the Possibility of using centralized or cloud-based electronic certificatesThese certificates are managed and stored securely on government servers, allowing documents to be signed electronically from any device without installing additional certificates.
- You must have advanced registration in Cl@ve (usually in person, video call or digital certificate).
- Activate Permanent Cl@ve and request the generation of the centralized digital certificate.
- You can use the Cl@ve app to validate and sign documents in the cloud, ensuring maximum security and usability.
The electronic signature with Cl@ve is legally valid and recognized for tax, labor, health, and any other public procedures.
Advantages of Cl@ve and comparison with other authentication methods
- Unification and simplification: same user for all Spanish public services, saving complications and confusion.
- High security: Use of dual authentication methods, short-lived PINs, and protection of sensitive credentials.
- Flexibility: You can choose the most convenient method at any time, depending on the procedure or whether you have your phone at hand.
- Access from any device: The Cl@ve app allows you to authenticate using just your mobile phone, but you can continue using traditional digital certificates if you prefer.
Practical tips and recommendations for the safe use of Cl@ve
- Keep your mobile phone number up to date, as it's the primary channel for receiving temporary passwords and security notifications.
- Never share your PIN or Permanent Cl@ve password. Even if the PIN is temporary, your account could be temporarily compromised.
- If your phone is lost or stolen, you can cancel your session from the official portal and associate a new one after activation.
- For sensitive transactions (including banking or public health), always opt for enhanced authentication or QR/push notification authentication whenever possible.
The Cl@ve platform represents an advanced, secure, and convenient solution for identifying yourself with the Spanish Public Administration from any location and device. Whether you are a casual user or a professional who performs daily procedures, the different methods (Cl@ve PIN, Cl@ve Permanente, and Cl@ve Mobile/Cl@ve app) are designed to adapt to your needs and maximize security in all your online transactions. Installing and activating the Cl@ve app on your mobile phone is today the fastest and most secure method to close the loop of digital administration, facilitating everything from the simplest procedures to the most advanced electronic procedures, such as cloud signatures. Familiarizing yourself with its options will ensure you never feel lost in your online transactions again.