Do you need an online login (Cl@ve), a certificate or both?

Key rules

• Cl@ve: Start with Cl@ve for routine logins to tax, Seguridad Social, traffic and your citizen folder.
• Certificate: You need a certificate with Autofirma when you sign legally binding documents, file certain returns or act for someone else.
• Service limits: Each service sets the lowest security level it accepts, so one that rejects Cl@ve may accept a certificate.

The short answer

Choose Cl@ve for most routine logins. Add a certificate where a procedure requires it, or where you need to sign or file something. Many people end up with both, but Cl@ve is the one to set up first.

When Cl@ve is enough

Cl@ve covers the services most residents use:

• Hacienda (tax office). You can also file the annual income tax return with a reference number.
• Seguridad Social, including its online office and Import@ss. An SMS-code route is also available.
• Traffic (DGT).
• Your personal citizen folder, Carpeta Ciudadana.

All of these also accept a certificate, so either tool works for them. Individual procedures inside a service may accept only one method. If a page rejects Cl@ve, try the certificate.

When you need a certificate

You need an electronic certificate (or the DNIe) together with Autofirma when you:

• sign documents with a legally binding electronic signature;
• make many registry filings;
• make some tax filings, such as certain Modelo 720 and company or representative filings;
• act for another person or a company;
• deal with the Registro Mercantil or the courts (LexNET).

Even where Cl@ve identifies you, a procedure can still ask for a certificate when a document must be signed.

Why the level matters

Each service sets the minimum security level it accepts. The certificate and DNIe sit at the highest level. Cl@ve methods rank lower, so a demanding service may refuse Cl@ve and ask for a certificate.

How to decide

• You only need to check your taxes, Seguridad Social and traffic points: Cl@ve alone.
• You run a company, represent someone, or sign and file documents: certificate, and usually Cl@ve as well.
• You are not sure: set up Cl@ve now and get the certificate when a procedure asks for it.

The decision tool, document list and questions below go into more detail.

Choosing between options

Should you use Cl@ve, a certificate or both?

• Cl@ve only: You mainly need to log in to routine services such as Hacienda, Seguridad Social, the DGT or Carpeta Ciudadana, and nothing needs a binding signature.

• Certificate only: You need a signature, a registry or court filing, or you act for another person or company, and you do not need other logins.

• Both: You face routine logins and also some procedures that require signing or filing with a certificate.

Check the exact procedure with the office you are dealing with, as the accepted method can differ within a service.

Documents you need

• Electronic certificate (for example the FNMT personal certificate) or DNIe, needed for binding electronic signatures, many registry filings, some tax filings and acting for another person or company.

• Autofirma, the signing program that works with your certificate or DNIe when a procedure needs a signature rather than just a login.

Frequently asked questions

Does every service accept the same Cl@ve method?

No, Cl@ve Permanente is generally rated higher than Cl@ve PIN, while the FNMT certificate and DNIe are accepted at the highest level, so check which method the service you need allows.

Can I use Cl@ve for my tax return and Seguridad Social?

Yes, Hacienda, Seguridad Social, the DGT and Carpeta Ciudadana all accept Cl@ve or a certificate. The Renta can also be filed with a reference number, and Seguridad Social offers an SMS-code route.

When will Cl@ve not be enough?

Expect to need a certificate when you act for another person or a company, file at the Registro Mercantil or the courts (LexNET), or file some tax forms such as certain Modelo 720 filings.