Regulation

eIDAS 2

eIDAS 2 Regulation — European digital identity

Regulation (EU) 2024/1183 modernising the 2014 eIDAS framework, creating the European Digital Identity Wallet (EUDI Wallet) that Member States and major private players must recognise from 2026-2027.

Definition

eIDAS 2 (Regulation EU 2024/1183, in force since May 2024) modernises the 2014 eIDAS framework by creating the European Digital Identity Wallet, the EUDI Wallet.

It is one of the most structuring digital initiatives in the EU for 2025-2027: giving every citizen a sovereign way to prove their identity, share their attributes (diplomas, driving licence, status) and sign documents online anywhere in Europe, without depending on the US giants.

eIDAS 1 vs eIDAS 2

AspecteIDAS 1 (2014)eIDAS 2 (2024)
LogicStates notify their national schemesThe EU mandates a unified wallet
Central playerTSP (qualified providers)TSP + state wallet provider
AdoptionLow (little cross-border use)Mandatory (VLOPs, banks)
FormatX.509 certificates, CAdES/PAdES signature+ mDoc, SD-JWT, W3C VC
IdentityCase by caseUniversal EUDI Wallet
Qualified signatureQES via physical / cloud QSCDQES via wallet (mobile token)

What eIDAS 2 creates

  • EUDI Wallet: each Member State must provide at least one wallet by the end of 2026. It holds the PID (Person Identification Data, identity verified by the State), qualified or non-qualified attribute attestations (driving licence, diploma, health card) and a qualified signature key (QES).
  • Obligation to accept: VLOPs (very large platforms), listed banks, telecoms and transport platforms must accept the wallet for authentication, signature and attribute sharing. French banks will have to accept it as a valid KYC method.
  • Assurance levels: the three eIDAS levels are maintained — Low, Substantial (equivalent to SCA), High (equivalent to the national e-ID card). The wallet targets High for the PID and Substantial for everyday attestations.
  • Architecture Reference Framework (ARF): a technical spec based on mDoc (ISO 18013-5), SD-JWT, OpenID4VP/VCI and X.509 PKI.

Key timeline

  • May 2024 — entry into force.
  • 2024-2025 — ARF finalised and Large Scale Pilots (POTENTIAL, NOBID, EWC, DC4EU).
  • End of 2026 / early 2027 — each State must provide at least one EUDI Wallet.
  • 2027-2028 — obligation for VLOPs, banks and telecoms to accept it.

The French case

France is building its wallet through France Identité (DINUM / Interior Ministry, with a digital national e-ID card already available), FranceConnect+ as an identification gateway, and the ANSSI for security qualification. France Identité is intended to become the French EUDI-compatible wallet building block.

What eIDAS 2 changes for fintech

  • Simplified KYC: remote KYC with a certified wallet, without video or a photo of an ID document.
  • Cross-border onboarding: a Polish citizen opens an account at Qonto with their PL wallet, without a specific FR procedure.
  • Contract signing: built-in QES, replacing the DocuSign flow in most cases.
  • Attribute sharing: proving "of age", "resident" or "creditworthy" without revealing your entire ID (SD-JWT).
  • SCA: the wallet can serve as a universal second factor.

What eIDAS 2 is not

  • Not a single European ID card: interoperable national wallets.
  • Not mandatory for the citizen: opt-in, but a service cannot refuse someone for not using it (except in special cases).
  • Not managed by the Commission: issuance and operation fall to the Member States.
  • Not (yet) a payment wallet: this is about identity, not SEPA or cards, even though convergence is possible in the long run.

In the PSD2 / FIDA ecosystem

eIDAS 2 is the identity anchor of the future European data ecosystem:

  • DSP3 / PSR: SCA authentication via the wallet.
  • FIDA: PSU authentication for data sharing.
  • AML / AMLR: pan-European KYC accepted via the wallet.

Concrete examples

  • Cross-border account: a German citizen opens a Qonto FR account with their DE wallet, KYC validated without a specific FR procedure.
  • Loan signing: an SCPI has a €100K contract signed via the wallet's QES — with the value of a handwritten signature.
  • Age verification: a social network asks for proof of "of age"; the wallet returns yes/no without revealing the date of birth.
  • POTENTIAL: EU pilot 2024-2025 testing the wallet across 6 cases (bank account, payment, travel, health, business, signature).
  • France Identité: app already available, the basis of the future FR wallet.
  • Apple / Google Wallet: these proprietary wallets will have to interoperate with the EUDI — a technical and political standoff is under way (NFC on iOS).
  • KYC impact: Qonto, Revolut and N26 anticipate a noticeable reduction in cross-border onboarding costs.

Sources

Go deeper

From the blog

Longer reads to go beyond the definition.

April 7, 2026
technical

Technical architecture of a PSD2 API: what to know before writing the first line of code — Read more

A technical overview of PSD2 for CTOs, developers and technical PMs: API standards, security (mTLS, eIDAS certificates), OAuth2, SCA flows, consent management, implementation pitfalls.

April 6, 2026
regulation

Understanding PSD2: what it changes for your customers and your business — Read more

Everything an executive, a product manager or a business team needs to understand about PSD2. Players, consent, opportunities, without technical jargon.