DigiD is the cornerstone of digital identity in the Netherlands, serving as your key to access government services, healthcare portals, pension information, and tax filings. With increasing digital threats and occasional service disruptions due to DDoS attacks, knowing how to store your DigiD credentials securely has never been more important. This comprehensive guide will walk you through best practices for protecting your digital identity while maintaining convenient access to essential services.
Understanding DigiD and Its Importance
The official DigiD login interface provides secure access to Dutch government services
DigiD (Digital Identity) is the Netherlands’ official authentication system that allows citizens to verify their identity online when accessing government services. It serves as a digital signature, confirming that you are who you claim to be when logging into websites of government institutions, healthcare providers, pension funds, and educational organizations.
Your DigiD consists of several critical components: a username, password, and depending on your security level, additional verification methods such as SMS codes or the DigiD app. When a storing DigiD outage occurs, as happened in January 2025 due to DDoS attacks, it can disrupt access to essential services like tax filings, healthcare portals, and benefit applications.
Why DigiD security matters: Your DigiD provides access to sensitive personal information and government services. If compromised, someone could file tax returns in your name, access your medical records, or apply for benefits fraudulently. Proper storage of your credentials is your first line of defense.
Security Risks of Improper DigiD Storage
Before diving into best practices, it’s important to understand the risks associated with improper storage of your DigiD credentials. Being aware of these vulnerabilities will help you appreciate why secure storage methods are essential.
Common Risky Practices
- Writing passwords on sticky notes or paper kept near your computer
- Storing credentials in unencrypted digital notes or documents
- Saving DigiD passwords in your browser without additional protection
- Using the same password for DigiD and other online accounts
- Sharing your DigiD credentials with family members or caregivers without proper authorization
Potential Consequences
- Identity theft leading to fraudulent tax filings or benefit applications
- Unauthorized access to your medical records and healthcare information
- Financial loss through manipulation of government accounts
- Privacy violations exposing your personal information
- Being held responsible for actions performed with your digital identity
Important: During a DigiD storing incident, like the one reported in January 2025, your credentials remain vulnerable even when the service is down. Never share your login details with anyone claiming to help you access services during an outage.
Best Practices for Storing DigiD Credentials
Securing your DigiD credentials requires a balanced approach that combines strong security with practical usability. Here are the recommended methods for safely storing your DigiD information:
Digital Storage Solutions
1. Password Managers
Password managers are specialized applications designed to securely store all your credentials in an encrypted vault. They offer the best balance of security and convenience for storing DigiD credentials.
Advantages
- Military-grade encryption protects your credentials
- Generates strong, unique passwords
- Available across multiple devices
- Requires only one master password to remember
- Many offer biometric authentication for added security
Considerations
- Requires learning a new tool
- Some premium options have a subscription cost
- Master password must be very strong and memorable
Recommended password managers: Bitwarden (free, open-source), 1Password, LastPass, and KeePass (offline option). All offer strong encryption and user-friendly interfaces suitable for storing DigiD credentials.
2. Encrypted Notes Applications
If you prefer a simpler approach than a full password manager, encrypted notes applications offer a good alternative for storing DigiD credentials.
- Choose an app that offers end-to-end encryption (like Standard Notes, Joplin, or the secure notes feature in Apple’s Notes app)
- Create a dedicated note for your DigiD information
- Protect the note with a strong password or biometric authentication
- Include your username but consider using a password hint rather than the actual password
- Never store SMS verification codes permanently – these should be used immediately and discarded
Physical Storage Methods
While digital solutions offer convenience, some users prefer physical storage methods. If you choose this approach, follow these guidelines:
Written Records
Do:
- Use a dedicated notebook solely for important credentials
- Store in a secure location like a safe or locked drawer
- Consider using a simple code or password hint system
- Keep separate from identification documents
Don’t:
- Write “DigiD” clearly on the page
- Store near your computer or workspace
- Keep in obvious locations like desk drawers
- Write down temporary SMS codes
Security Tip: Consider using the “password masking” technique. Instead of writing your actual password, write a hint or a partially masked version that only you would understand. For example, if your password is “Amsterdam2023!”, you might write “A*****m20**!”
What to Do If Your DigiD Credentials Are Compromised
Even with the best security practices, there’s always a risk that your DigiD credentials could be compromised. Here’s what to do if you suspect unauthorized access or forget your login information:
If You Suspect Unauthorized Access:
- Block your DigiD immediately by visiting the official DigiD website or calling the helpdesk at 088 – 123 65 55
- Report the incident to the Dutch police if you suspect identity fraud
- Monitor your government accounts for any suspicious activity
- Request a new DigiD after blocking your compromised one
- Use different credentials for your new DigiD account
Important: During a storing DigiD incident (service outage), you may not be able to block your account online. In this case, call the helpdesk immediately.
If You’ve Forgotten Your Credentials:
- Visit the official DigiD website at www.digid.nl
- Click on “I forgot my username or password”
- Follow the verification steps, which may include:
- Entering your BSN (citizen service number)
- Providing your date of birth
- Receiving an activation code by post (this may take up to 3 business days)
Note: If you’re experiencing a storing DigiD incident (service outage), you’ll need to wait until services are restored before requesting new credentials. Check the official DigiD status page or social media for updates.
Enhancing Your DigiD Security
Beyond secure storage, there are additional measures you can take to enhance the security of your DigiD account:
1. Use the DigiD App with ID-Check
The DigiD app offers the highest security level available, especially when used with the ID-Check feature.
Benefits:
- Eliminates the need for SMS codes
- Uses your device’s built-in security features
- Provides the highest security level (Substantieel)
- Works even during some types of storing DigiD incidents
Setup:
- Download the official DigiD app
- Activate it using your DigiD credentials
- Set up ID-Check by scanning your ID card or passport
- Secure the app with a PIN or biometrics
2. Use DigiD Machtigen Instead of Sharing Credentials
If you need someone else to handle your government affairs, never share your DigiD credentials. Instead, use the official DigiD Machtigen (authorization) service.
- Allows you to authorize someone to act on your behalf
- Maintains a log of all actions taken by your representative
- Gives you control over which services they can access
- Can be revoked at any time
- Works with family members, caregivers, or professional representatives
Note: During a storing DigiD incident affecting DigiD Machtigen services, authorizations may be temporarily unavailable. Plan accordingly for critical tasks.
Regular Security Practices
- Change your password regularly – at least every 6-12 months
- Check your login history – review recent logins in your DigiD account
- Keep your contact information updated – ensure recovery options are current
- Stay informed about DigiD updates – follow official channels for security news
- Be aware of phishing attempts – the Dutch government will never ask for your DigiD credentials via email or phone
Common Mistakes to Avoid When Storing DigiD
| Mistake | Why It’s Risky | Secure Alternative |
| Using the same password for DigiD and other accounts | If one service is breached, your DigiD could be compromised | Use a unique, complex password specifically for DigiD |
| Sharing DigiD credentials with family members | Violates terms of service and creates security vulnerabilities | Use DigiD Machtigen to authorize others properly |
| Storing credentials in unprotected digital notes | Easily accessible if your device is compromised | Use encrypted notes or a password manager |
| Writing DigiD information on paper near your computer | Visible to anyone with physical access to your space | Store written information in a locked drawer or safe |
| Saving DigiD password in browser without additional security | Anyone using your device could access your DigiD | Use browser password storage only with master password protection |
| Ignoring storing DigiD incidents and service updates | Missing critical security information or service changes | Follow official DigiD channels for important announcements |
Balancing Security and Convenience
Securing your DigiD credentials doesn’t mean making them inaccessible. The key is finding the right balance between security and convenience that works for your situation:
- Choose a storage method that matches your technical comfort level
- Implement the highest security level you can reasonably maintain
- Have a backup plan for accessing your credentials in emergencies
- Stay informed about storing DigiD incidents and service updates
- Regularly review and update your security practices
Remember: Your DigiD is your digital identity in the Netherlands. Protecting it is protecting your personal information, financial security, and access to essential government services.
Frequently Asked Questions About Storing DigiD
What should I do during a storing DigiD incident when services are down?
During a DigiD outage or storing incident, it’s best to wait until services are restored before attempting to log in repeatedly. Check the official DigiD status page or social media accounts for updates. If you have an urgent government matter that cannot wait, contact the specific organization directly to ask about alternative procedures during the outage.
Is it safe to use a password manager for DigiD credentials?
Yes, reputable password managers are one of the safest ways to store DigiD credentials. They use strong encryption to protect your information and offer features like auto-filling credentials (reducing the risk of keyloggers). Choose a password manager with a strong reputation for security and ensure you protect it with a strong master password and two-factor authentication if available.
Can I share my DigiD with a family member who helps manage my affairs?
No, sharing your DigiD credentials with anyone, including family members, violates the terms of service and creates security risks. Instead, use the official DigiD Machtigen (authorization) service, which allows you to legally authorize someone to act on your behalf for specific government services without sharing your credentials.
How often should I change my DigiD password?
It’s recommended to change your DigiD password at least once every 6-12 months. Additionally, change it immediately if you suspect any security breach or if you’ve used a public or shared computer to access your DigiD. Always create a strong, unique password that you don’t use for any other service.