ENISA Opens Consultation on EUDI Wallet Cybersecurity Certification

The EU Agency for Cybersecurity has launched a public consultation on Draft Candidate EU Digital Identity Wallet Certification Scheme v0.4.614, the document now serving as the primary reference for developers and member states preparing for mandatory wallet certification. The consultation period runs from April 2 to April 30, 2026, with stakeholders asked to validate the scheme’s principles and general structure and to provide feedback on proposed certification elements and annexes.

ENISA published the draft scheme on April 2, 2026, and held an informational webinar on April 8, 2026, from 15:00 to 16:30 CEST to walk through the document and take questions. The European Cybersecurity Certification Conference, scheduled for April 15, 2026 in Cyprus, will include the EUDI Wallet certification as a primary agenda item.

ENISA was formally tasked in 2024 with developing the EUDI Wallet cybersecurity certification, a process that has now reached its public consultation stage. The agency’s mandate came from the European Commission in May 2024, and an Ad Hoc Working Group of 26 appointed members plus 15 reserve experts, which held its kick-off meeting in January 2025, produced the draft under review.

The certification scheme fulfills a requirement under the EU Digital Identity Regulation that entered into force in May 2024, which mandates that all member states provide at least one certified EUDI Wallet by end of 2026. The European certification scheme is to be published as an Implementing Act by the same deadline. In February 2026, ENISA signed a two-year Contribution Agreement worth 1.6 million euros to support member states in developing national certification schemes and transitioning to the European framework.

ENISA describes the scheme’s purpose as ensuring “security and protection of privacy of users and their personal data.” The scheme will govern wallets whose underlying security architecture includes FIDO authentication standards, and the certification process will define conformity assessment requirements that certification bodies must apply.

Ahead of the ENISA scheme, a Nordic-Baltic certification framework was adopted in late 2025, positioning that regional bloc as an early mover in the broader EU standardization process now under consultation. The April 30 deadline gives developers and member states approximately four weeks to submit formal feedback before ENISA advances to the next stage of the certification development process.

Sources: ENISA, ENISA Certification Portal, Digital Watch Observatory

–

By the ID Tech Editorial Team