In short
For dealing with Spain's administration online (cita previa, AEAT, Seguridad Social) you need one of two identification methods: the certificado digital (FNMT certificate, installed in your browser, lets you sign documents) or Cl@ve (username/password, no file to install). DNIe won't work for Ukrainians (no DNI) — use the FNMT certificate and/or Cl@ve. You need a NIE first, and don't switch computer or user account between the steps of the process.
In Spain almost all dealings with the government happen online: booking a cita previa, submitting applications, accessing the Seguridad Social and the tax agency (AEAT), getting padrón certificates, checking the status of your cases. To do this from home instead of in queues, you need an electronic means of identification. There are two main ones: the certificado digital (FNMT certificate) and Cl@ve. This guide covers how they differ, what to prepare and how to get each — with the situation of Ukrainians and Russian speakers in mind. If you ever need an extranjería cita previa for other procedures (NIE, TIE), we cover how to catch one in Cita previa at extranjería: how to catch an appointment.
What they are and why you need them
The certificado digital is an FNMT electronic certificate installed in your browser that proves your identity online and lets you sign documents. Cl@ve is the state login system for public services using a username and password, with no file to install. NIE holders without a Spanish DNI can use both routes, but not the DNIe; many people set up both.
Certificado digital (FNMT)
An electronic certificate installed in your browser or computer. It proves your identity online and lets you sign documents and applications.
Cl@ve
The state electronic-identity system for accessing public services with a username and password/PIN, with no file to install. Fast access to procedures.
DNIe — the electronic chip in the Spanish ID card (DNI). Ukrainian citizens don't have a DNI, so this route isn't for you — use the FNMT certificate and/or Cl@ve.
Which to choose
In short: Cl@ve for quick access to public services, and the certificado digital when you need to sign documents and forms. Many people set up both — they complement each other. It's often easiest to start with Cl@ve and leave the certificate for when you need to sign applications.
What to prepare in advance
For both routes you'll generally need:
- the NIE and the document proving it: the TIE (under FNMT rules, even an expired one — what matters is that it shows the NIE) or the official NIE-assignment document;
- a valid passport, the original;
- access to your email and phone (for codes and confirmations);
- to be at least 18 years old (or an emancipated minor) — that is the FNMT's condition.
NIE first, digital signature second
Without a NIE you can't obtain the certificado digital or register for Cl@ve — the system identifies you precisely by your foreigner number. If you don't have a NIE/TIE yet, start there (see our NIE guide).
Certificado digital FNMT — 4 steps
The FNMT certificate for individuals is issued in four steps: install the FNMT configurator on your computer, apply online on the FNMT website to receive a código de solicitud by email, prove your identity in person at an accreditation office (AEAT, Seguridad Social and others, usually with a cita previa), then download the certificate about an hour later — on the same computer and under the same user account you applied from.
The personal certificate (persona física) via software is issued following the FNMT's official procedure in four consecutive steps:
Prior configuration
Install the FNMT configurator on your computer before applying.
Online request
Apply on the FNMT website, set a password → you'll receive a código de solicitud by email.
In-person accreditation
Verify your identity at an accreditation office (AEAT/Social Security and others), usually by appointment.
Download the certificate
After about an hour, download it with the code and password on the same computer and user account, and back it up.
Step 1. Prior configuration
Install the FNMT configurator (there are versions for Windows, macOS and Linux) on your computer before requesting the certificate. It generates the certificate's keys and runs by itself when the browser calls it. The FNMT supports the latest versions of Firefox, Chrome, Edge, Opera and Safari; antivirus software or proxies can block the configurator.
Step 2. Online request
Request the certificate on the FNMT website: NIF/NIE, first surname and email. During the process you set a new password — it is asked for again at step 4 and cannot be recovered: if you forget it, you have to start the request over. A request code (código de solicitud) will arrive by email. Save it.
Step 3. In-person identity accreditation
With the request code and your documents, prove your identity in person at one of the more than 2400 FNMT accreditation offices — offices of the AEAT, the Seguridad Social and other bodies. At AEAT, Seguridad Social and a number of other offices a cita previa is required — check with the office itself. Correos post offices do not handle the personal certificate. If you are abroad, you can accredit at a Spanish consular office. A third person can attend on your behalf, but only with your signature on the contract certified by a notary (legitimación de firma) — an ordinary power of attorney is not accepted. Bring your valid passport and the document showing your NIE (TIE or the NIE-assignment document).
Step 4. Downloading the certificate
About an hour after accreditation you can download and install the certificate, using the request code and the password from step 2 again — on the same computer and under the same user account. Make a backup copy straight away (export to a password-protected file): with it you can also install the certificate on another computer or a phone. Each person can hold only one FNMT personal certificate — a new request automatically revokes the previous one.
The most common mistake: switching computer between steps
The request (step 2) and the download (step 4) must be done on the same computer and under the same user account — that is what the FNMT requires; the computer must not be formatted between steps. The key pair is generated on the device when you apply — on another computer you won't be able to download the certificate and you'll have to start over. The second trap is the password set during the request: without it the download is impossible.
Documents for accreditation
The document list for step 3 is set by the FNMT. For a non-EU foreigner it is the document showing the NIE — the foreigner identity card (TIE) with the NIE on it, regardless of whether it has expired, or the official NIF/NIE-assignment document — together with a valid passport. Documents are presented in the original. Check the office list and requirements on sede.fnmt.gob.es before going.
Validity and renewal
Under the FNMT certification policy the personal certificate is valid for 4 years from issue; however, the FNMT FAQ says that certificates from the AC FNMT Usuarios authority are valid until 31 December 2028 — the exact date is written in the certificate itself, so go by that. Renewal is available online during the 60 days before expiry (an expired certificate cannot be renewed — you need a new request). Only a certificate obtained with in-person accreditation and never renewed before can be renewed online; in every other case the FNMT requires you to prove your identity in person again.
Cl@ve — ways to register
Cl@ve is Spain's state electronic-identity system for logging in to public services. With a NIE or TIE there are three reliable ways to register: the invitation letter (carta de invitación), in person at a registration office, or online via an already-obtained certificado digital. Video identification is temporarily offered only to Spanish citizens with a DNI, so for foreigners that route is closed for now.
Cl@ve is the "electronic identity" for the administration. Registration has two levels: basic (registro básico) opens many services but not all, and does not allow Cl@ve Firma; advanced (registro avanzado) is needed for procedures with higher security requirements. With a NIE/TIE, the most reliable routes are:
- Online with an invitation letter (carta de invitación) — requested on the AEAT website with your NIE and the número de soporte of your TIE; the letter is sent to your tax address (domicilio fiscal) in the AEAT database, so it must be up to date. The letter contains a CSV code valid for 60 days. Gives the basic level.
- In person at a registration office (usually with a cita previa) — offices of the AEAT, the Seguridad Social, the SEPE and the Government Delegations, plus many regional and municipal offices. You must attend yourself (no representative) with your NIE, passport or travel document and a mobile phone. Gives the advanced level.
- Online via a certificado digital — if you already have the FNMT certificate (see above). Gives the advanced level.
Video identification: currently only for Spanish citizens with a DNI
Cl@ve also has routes with video identification (automatic and with manual review). Per the official portal clave.gob.es, video-identification registration is temporarily offered only to Spanish citizens with a valid DNI — for NIE holders that route is currently closed; the AEAT confirms the same. The restriction is flagged as temporary and may change — check clave.gob.es; in the meantime, use the invitation letter, in-person registration or the certificado digital.
After registering you have two access modes:
- Cl@ve PIN — a one-time code with limited validity (use it within 10 minutes), delivered to the Cl@ve app or by SMS; useful for infrequent procedures.
- Cl@ve Permanente — a permanent password for regular access, activated with an activation code after registration; for higher-security procedures a one-time SMS code is also requested — and that SMS is only sent at the advanced registration level.
Cl@ve Móvil and Cl@ve Firma
There's Cl@ve Móvil (login by confirming in the Cl@ve app or scanning a QR code) and Cl@ve Firma — cloud signing with certificates held by the administration. Important: Cl@ve Firma requires the advanced registration level (in person at an office or online with a certificado digital), an activated Cl@ve Permanente and an SMS code for each signature. Basic registration by letter or video identification isn't enough; per the AEAT, the advanced level obtained after manual review of the video identification doesn't enable Cl@ve Firma either. The cloud certificate is tied to the document you registered with — for foreigners, the foreigner card: when the TIE expires, so does the certificate.
AutoFirma — signing documents
AutoFirma is the Spanish government's free official application for electronically signing documents and forms on public portals. It works together with your certificado digital and signs PDFs and applications directly on government websites. On many public portals, when a procedure requires a signature — for example submitting applications and appeals — it is done precisely via AutoFirma.
Many procedures (submitting applications, appeals, forms on public portals) require an electronic signature. For this Spain uses the free official app AutoFirma:
- downloaded from the official electronic-signature portal firmaelectronica.gob.es (versions for Windows, macOS and Linux);
- works together with your certificado digital;
- signs PDFs and forms directly on government websites.
If something 'won't sign'
Common causes: AutoFirma isn't installed, the browser doesn't detect the certificate, the certificate has expired, or an incompatible browser is being used. Restarting AutoFirma and checking the certificate is correctly imported usually helps.
What it gives you in practice
With the certificado digital or Cl@ve you'll be able to, without travelling:
- book a cita previa (extranjería, AEAT, Seguridad Social);
- submit applications and track the status of your cases;
- obtain padrón certificates (volante/certificado de empadronamiento) online;
- deal with the AEAT — tax returns, certificates;
- request documents from the Seguridad Social (affiliation number, vida laboral).
Tip
Set up your digital identification right after getting your NIE/TIE — it saves dozens of hours of queues and often removes the need to "hunt" for an unreachable cita previa at the office.
This article is informational and describes the general procedure; official conditions and the office list can change — verify with the primary sources sede.fnmt.gob.es (certificate) and clave.gob.es (Cl@ve). The facts were checked against these sources in September 2026. If you need help from a Russian- or Ukrainian-speaking professional (gestor, lawyer), check our verified directory.