Cl@ve and the Digital Certificate in Spain: A Guide for Americans

Cl@ve, the Spanish government’s shared login, and the digital certificate of the FNMT, the national mint, open Spain’s online administration, from the tax return to an immigration renewal. For an American arriving on a visa, the certificate can come first. It can sometimes start from the NIE assignment paper, which gives you your foreigner identification number, even at a Spanish consulate in the United States. Cl@ve opens to foreigners only once they hold a TIE, the foreigner identity card. The TIE guide covers the card. This article is for informational purposes only and is not legal advice; verify current requirements with the relevant Spanish authority or a licensed professional.

What goes wrong when your Spanish digital ID is missing or misused?

Unless a rule obliges you, Law 39/2015 lets you deal with offices on paper. A missing or misused digital ID still costs you in four places.

• Notices you never open. Once you are obliged to, or have opted to, receive notifications electronically, one left unopened for 10 calendar days counts as rejected (article 43). That holds even if the email or SMS alert never came (article 41).
• Filing online. Mercurio, the immigration e-filing platform, asks for a recognized digital certificate (Mercurio page). A Barcelona note of May 20, 2025 made non-lucrative and self-employed renewals Mercurio only, but the Supreme Court has since annulled the online only rule for non-lucrative renewals (BOE; see the non-lucrative visa guide); no page read says whether Barcelona now takes paper.
• One phone, one person. A mobile number links to only one DNI (a Spaniard’s national identity card) or NIE (Cl@ve), and registering a number linked to someone else cuts that person off, warns the AEAT, Spain’s tax agency.
• No stand-ins. Nobody can register for you (Cl@ve) or use your credentials, even with your consent (AEAT).

Cl@ve, the FNMT certificate and idCAT side by side

The 2015 rules name two registration levels: básico (basic) for the online letter, avanzado (advanced) for registration in person or with a certificate. AEAT pages call the higher one alto (high). The AEAT says certain procedures of other bodies need the advanced level, without saying so of its own, and Social Security notifications by Cl@ve need it (Seguridad Social).

Pages disagree on three details; plan on the stricter figure.

• Login request or SMS PIN: 5 minutes on an AEAT page of June 24, 2026, 10 on the legacy Cl@ve PIN page.
• App: Android 9 on the AEAT’s page of July 27, 2026, Android 8 on clave.gob.es, iOS 15 on both.
• Password: at least 8 characters from all four groups (lower case, upper case, digits, symbols) on one Cl@ve page, three of the four on another.

Registering Cl@ve with a TIE

Wait for the TIE: the 2015 resolution opens Cl@ve to Spaniards with a DNI and to foreigners with a TIE or EU citizen certificate, in force. Online forms check the card’s número de soporte (support number): on a TIE, the letter E and 8 digits on the front (AEAT), and Madrid’s city offices refuse documents without one. The AEAT names four documents carrying one; neither a visa nor the NIE paper is among them. If correctly typed data keep being rejected, the AEAT sends you to a Policía Nacional station (AEAT); no page covers a renewed TIE that brings a new support number.

Video registration in the app is temporarily for Spaniards with a DNI in force, says an AEAT page of May 13, 2026. Social Security’s own video identification takes a TIE, but the Import@ss help presents it as a login for Import@ss, Social Security’s online portal, not a Cl@ve registration. A TIE holder has three routes:

1. Invitation letter, basic level. Request it online with your NIE and support number (Cl@ve). It goes only to the domicilio fiscal, your tax address on the AEAT census, and you have 60 days to use it (AEAT). It takes about 7 working days, and an outdated address is fixed through Renta WEB (the AEAT’s online tax return service), census form 030 or an AEAT office (AEAT). No page says whether it can go to a U.S. address or whether a new NIE has a tax address.
2. In person, advanced level. Offices of the AEAT, Social Security, SEPE (the employment service) and the government delegations register, many by appointment (Cl@ve), as do 22 provincial and 5 local DGT traffic offices, none in Barcelona or Valencia (DGT); the AEAT books online or on 91 333 5 333 (AEAT).
3. With a certificate, advanced level. An FNMT certificate registers you online (Cl@ve).

Documents differ by page: the Cl@ve office page says only DNI, the AEAT the DNI or NIE document plus a passport for foreigners, the citizen portal, like Madrid, a TIE, residence permit or EU certificate plus a passport. Bring the TIE, your passport and your phone. A U.S. number works if it receives SMS from foreign operators (Cl@ve FAQ), given with its country code (AEAT). No consulate appears on the office list.

Getting the FNMT certificate, in Spain or from the U.S.

Any adult with a DNI or NIE gets the FNMT citizen certificate free (FNMT). Video identification, at 2.99 euros plus tax, needs an electronic DNI (FNMT), and the app’s video route a valid DNI for now (FNMT app), so an American goes in person.

1. Prepare. Run the FNMT configuration tool and do every step on the same computer and user account (FNMT).
2. Request. You get a request code; the password you set is needed to download and cannot be recovered (FNMT).
3. Prove your identity in person at one of over 2,400 offices in Spain, many by appointment, or at a Spanish consulate abroad (FNMT). A stand-in needs your signature certified by a notary or a Spanish consulate; a foreign notary’s certification must be apostilled or legalized, with a sworn Spanish translation of the apostille (FNMT rulebook).
4. Download. Immediately on one FNMT page, about 1 hour later on another, and one or two business days later according to the consulates.

The FNMT wants a TIE showing the NIE, or the official NIE assignment document, plus the passport (FNMT). Its rulebook of March 2, 2026 limits the NIE paper to special cases: someone who has never had a foreigner’s card and is getting the NIE, or who got it for administrative, economic, professional or social reasons (FNMT rulebook).

The Washington, New York, Los Angeles and Miami consulates check identity free and without an appointment, weekdays from 9 a.m. to 1 p.m., according to their pages in Spanish. They accept a TIE, or a verifiable NIE document plus a valid ID; their checklists omit the passport, which the FNMT requires, so bring it. An AEAT list dated June 7, 2021 also names the consulates in Boston, Chicago, Houston, San Francisco and San Juan, Puerto Rico.

The FNMT’s practice statement of November 11, 2025 caps certificates of its new G2 hierarchy at 4 years and runs those of the older RSA hierarchy to December 31, 2028 at most. An FNMT notice of December 9, 2025 says RSA issuance ends December 31, 2026, while an AEAT page of January 8, 2025 still gives every certificate 4 years, which an RSA certificate issued today cannot reach. No page says which hierarchy you get today, so read your expiry date. Renewal opens 60 days before expiry and works online once only (FNMT). Autofirma handles the G2 hierarchy’s elliptic-curve certificates from version 1.9, the FNMT says.

Which procedures take which ID

• Tax return. Cl@ve lets you file income and wealth tax returns (AEAT), including through Renta WEB (AEAT), which also takes a 6-character reference (AEAT). You currently obtain it with box 505 of your 2024 return or, if you did not file, the last five IBAN digits of an account you held in 2025. NIE holders add the support number, and each new reference, up to 10 a day, cancels the last (AEAT).
• Social Security. Import@ss takes an SMS login if the Tesorería (the Social Security treasury) has your mobile, Cl@ve or a certificate (Seguridad Social); without them, some procedures take a copy of your NIE document and a selfie (Import@ss help).
• Immigration. Mercurio itself says you file with a digital certificate (Mercurio). Its access for individuals passes through the Cl@ve gateway, but no official page says which logins it offers there, so plan on a certificate to file online. The e-office’s Mis expedientes (my files) area does take Cl@ve (e-office). The UGE, the unit for Law 14/2013 permits, requires a certificate, though its procedure page shows a Cl@ve icon.
• Nationality. The application button reads online processing with a digital certificate and needs Autofirma (Justice e-office); the ministry’s guide of November 5, 2025 tells you to pick a Cl@ve login method but stops before the signing step. Plan on a certificate to file online, as the citizenship guide does; it also covers paper filing (Law 39/2015, article 16.4).
• Traffic. miDGT, the app of the DGT (Spain’s traffic authority), takes a certificate, Cl@ve, or your data plus an SMS key to a phone the DGT has on file (DGT).
• Padrón. Madrid’s online route requires electronic identification (Madrid); Barcelona’s requires a signature by idCAT Mòbil, Cl@ve, DNIe or FNMT certificate (Barcelona). The padrón guide covers the documents.

Notifications and people acting for you

The DEHú (Dirección Electrónica Habilitada única), the state’s notification inbox, and Mi Carpeta Ciudadana, the state’s personal online folder, both need a certificate or Cl@ve, and unless obliged you can switch between paper and electronic at any time (citizen portal). The Carpeta lists pending notifications; its FAQ says you open them in the DEHú, while the citizen portal and Social Security say the Carpeta can open them. The DEHú can email you alerts (Carpeta).

Article 14.2 of Law 39/2015 obliges companies and other legal persons, entities without legal personality and members of compulsory professional bodies acting as such, among others, to deal with the administration electronically. The self-employed have had to deal electronically with Social Security, notifications included, since October 1, 2018, with no postal warning (Seguridad Social); the autónomo guide covers the Social Security registration that triggers this duty. Mandatory AEAT electronic notifications, which count as served after 10 unopened calendar days (AEAT), cover companies and members of certain registers under Royal Decree 1363/2010, not ordinary self-employed individuals; the AEAT announces your inclusion on paper and on its e-office.

• General register. A power in the REA lasts 5 years at most, and the attorney, for instance a gestor (a professional who handles administrative filings), must accept it.
• Tax agency. Gestores file through colaboración social, the AEAT’s agreements that let professionals file for clients, with their own certificate, which does not cover receiving AEAT communications. Anyone else acting for you needs a power in the AEAT’s register (AEAT FAQ), granted online, at an AEAT office or by notarized document (AEAT), for 5 years at most (AEAT).
• Social Security. Import@ss authorizes a third party for its public services, not your personal area (Import@ss help).

Regional IDs and keeping your access safe

• idCAT Mòbil is free from age 16 (Generalitat) and takes the routes shown in the table (Generalitat). The stronger idCAT Mòbil + by video needs a DNI (Generalitat).
• idCAT Certificat, from 18 with an NIE, comes by video with a DNI or TIE on the Generalitat’s page, but its section for foreigners says in person only.
• ACCV, the Valencian certification authority, issues a 3-year citizen certificate from age 14 with an NIE (ACCV), and its video ID takes a TIE. Both pages price video ID at 0 euros, yet one says it has a cost and the other mentions a payment step.

No administration asks for Cl@ve codes by phone, email or SMS; never confirm a Cl@ve Móvil request started from a private website (AEAT), and on Renta WEB check that the first login page starts with https://www2.agenciatributaria.gob.es and the Cl@ve Móvil page with https://www12.agenciatributaria.gob.es (AEAT). INCIBE, the national cybersecurity institute, warned of texts spoofing the AEAT sender name on May 26, 2026 and of fake DEHú logins on February 3, 2026.

If you lose your phone, deactivate the app’s device and log in with a 6-digit SMS code (AEAT); a new number needs a registration office or a certificate (AEAT). A lost FNMT certificate is revoked in person, or around the clock by phone with the request code (FNMT).

Your next step: an appointment the week your TIE arrives

Holders of an NIE assignment paper may get the FNMT certificate before moving, at the Spanish consulate in Washington, New York, Los Angeles or Miami; once the TIE arrives, it registers them for Cl@ve at the advanced level. Everyone else: book an advanced Cl@ve registration at an AEAT office the week the TIE arrives. Then get the FNMT certificate at an office in Spain, since Mercurio asks for one and the nationality button names one, though its guide starts from Cl@ve. Paper stays possible for nationality.

Most readers can do this alone. Get help when you must file a renewal online on a deadline, or when a gestor must act for you: give them a registered power, never your credentials. The NIE guide explains the number each step asks for.

The Spain Navigator puts every step of your move to Spain in order, from the visa to settling in.