BankID is used for identification and signatures at Sweden's largest banks, companies and authorities. Our customers have high demands on security and so do we.
Security in focus
Our top priority is to keep BankID as safe and reliable as it has always been. So that both companies and individuals can be confident about using BankID.
BankID has revolutionised everyday life and has won the hearts of Swedes. The latest Novus survey shows that 96 per cent of Swedes have a high level of confidence in our service.
We are regularly inspected by security experts as well as auditors and public authorities. We have never suffered a breach in the 20 years we have been providing the service and the service has been available 99.99 per cent of the time in the past year.
Level of assurance
BankID is certified according to the Swedish e-ID quality mark with a level of assuance reaching three out of four. The framework and information in the reviewing issuers can be found on DIGG's webbsite.
BankID has been inspected and approved according to the EU framework for e-identification, the eIDAS Regulation, with the level of assurance called 'Substantial'.
Security tests
All our services are thoroughly tested by both in-house and independent testers to ensure quality and safety. Independent code reviews, security analyses and penetration tests are used both on an ongoing basis and with each major change.
Security tips for companies
Use Secure start of BankID.
Write clear signature texts and use the formatting.
Security check your implementation.
Follow our guides for a safe and user-friendly experience.
Fully certified according to ISO27001
Our entire company is certified in accordance with the standard ISO27001. The technical infrastructure and its operation and maintenance have been certified since 2013, whereas other parts have been added later.
Review and reporting
We regularly conduct independent review of our regulations to ensure good compliance and risk mitigation. Independent security researchers, services that use BankID, and users can report security flaws.
