Setting Up and Using Polish Digital Identity and Public Services

Poland's digital tools are not interchangeable. Start with the action you need, then obtain the identity, signature, document or mailbox that can perform it. A PESEL number identifies a register record; it is not a login, signature, residence right or citizenship proof.

Match the tool to the capability

• login.gov.pl is the national sign-in gateway. It can route authentication through Profil Zaufany, a participating bank or other identity provider, e-dowód or qualified certificate.
• Profil Zaufany is a free identity profile linked to one PESEL. It logs into supported public services and authorises a trusted signature for public-administration matters. It is normally valid three years and can be extended. It is not a universal qualified signature for private contracts.
• e-dowód is a Polish identity card with an electronic layer. With PINs and NFC phone or reader it can authenticate and, if activated, create a personal signature. Only eligible Polish ID-card holders have it.
• A qualified electronic signature is a paid product from a qualified provider. It has the legal effect of a handwritten signature across EU contexts where qualified form is accepted. Provider package, device or cloud method, verification and renewal determine cost and use.
• mObywatel is the official app and service. For an eligible Polish citizen, mDowód is a domestic digital identity document. Other users may have a specific document or service, such as the 2026 electronic temporary-protection document. Merely having PESEL or a residence card does not create mDowód.
• e-Doręczenia provides a registered-electronic-delivery address, adres do doręczeń elektronicznych or ADE, and mailbox. The public service is free for citizens communicating with public bodies. A commercial qualified service can also correspond with private parties.
• ePUAP still exists, but since 1 January 2026 it is effective for delivery only where special provisions or a particular service still allow it. It is no longer the general default inbox.

Keep documents and credentials separate. mDowód displays identity; Profil Zaufany authenticates and signs supported public filings; ADE sends and receives legally evidenced correspondence; an individual portal stores its own submissions and receipts. Logging in, signing, sending and receiving a decision are four different events.

Choose the minimum useful set. A resident filing taxes and checking healthcare may need PESEL plus a supported login. A person corresponding formally with authorities in 2026 should add public ADE. A Polish citizen who wants domestic mobile identification can activate mDowód. A director signing private corporate documents may need a qualified signature rather than Profil Zaufany. Always check the receiving service's accepted method before purchasing hardware or a signature subscription.

Eligibility depends on the specific credential, not simply on living in Poland. Confirm the PESEL record, legal capacity, document and contact details before setup, because mismatched names, phone numbers or dates commonly block activation.

Profil Zaufany and sign-in

A person can generally create Profil Zaufany if they are at least 13, have PESEL and have full or limited legal capacity. It is free. Online confirmation is available through a participating bank or identity provider, e-dowód, qualified certificate and, for people meeting its document conditions, video verification. An in-person applicant can use any confirmation point, including abroad, with an accepted identity document such as ID card, passport or residence card.

The bank route requires the personal data in banking and PESEL to match. It links authorisation to that bank; after changing bank or authentication method, check the connection rather than assuming it transferred. A foreign phone number may require service-desk verification before SMS codes work. One PESEL can have only one valid Profil Zaufany.

Documents and app eligibility

mDowód is for a person whose current Polish ID-card data supports that document. A passport alone, foreign residence card or PESEL alone does not create it. The app can nevertheless support separately defined foreigner documents. From 5 March 2026, Poland's electronic temporary-protection document in mObywatel is the principal residence document issued for beneficiaries under that route. Eligibility, activation and travel consequences must be checked under the protection procedure, not inferred from mDowód.

Diia.pl has served specified adult Ukrainian beneficiaries with PESEL and required profile/app prerequisites. Do not assume every Ukrainian citizen, minor, later arrival or person whose UKR status changed retains the same document. Use the current Office for Foreigners and mObywatel instructions for the exact protection document now shown.

e-dowód requires an eligible Polish electronic ID card, its PINs and compatible NFC smartphone or reader. A personal signature certificate may need activation. A qualified signature requires identity verification with a provider and may use card, token, reader or cloud authorisation; check operating systems, mobile support, foreign-document onboarding, term, renewal and timestamp package before paying.

Any natural person can choose the public e-Doręczenia service for correspondence with public bodies, subject to identity verification and activation. It is free for citizens and other non-public users under the public service. A qualified commercial mailbox costs according to provider offer and is useful only when private-to-private correspondence or added services justify it.

Prepare a private email, controlled phone number, secure device, PESEL, identity document and exact register spelling. Do not use an employer's email or phone for a personal identity profile unless you can preserve access after leaving. If online setup fails because source data is wrong, correct the owning register before repeatedly creating accounts.

Start only from gov.pl, pz.gov.pl, the official mObywatel app-store listing or a provider listed in the relevant official register. A search advert, text-message link or caller offering “activation” is not an identity channel.

Create and test Profil Zaufany

Open the official Profil Zaufany setup and select a method you actually control. With a participating bank, authenticate in the bank and confirm matching personal data. With e-dowód, use the electronic card, PIN and NFC device or reader. For a confirmation point, submit the application, note its deadline and visit any listed point with an accepted document. Video verification is limited by its document and technical conditions.

After confirmation, record the expiry date. Profil Zaufany is valid for three years and can be extended for another three years from its account. Test login on a low-risk official service and confirm whether authorisation uses SMS, mObywatel push or the linked provider. Never approve a push or code you did not initiate.

Signing and submitting are separate. The official electronic-signature service can apply a trusted, personal or qualified signature to supported files and verify an existing signature. A trusted signature is intended for public-administration relations. A private contract requiring written form may need a qualified signature; confirm the legal form with the recipient.

Download the signed file, verify the signer and signature, then upload or send it through the designated service. A signed file sitting on your disk has not been submitted. Save the submitted payload and the service's UPP, UPO or equivalent official receipt with timestamp and case identifier.

Activate registered delivery

Apply for the public ADE through the official e-Doręczenia service, verify identity, activate the address and confirm its entry in the electronic-address database. The public mailbox is free and communicates with public bodies. Check the authority's ADE in BAE before sending. A qualified commercial provider is paid and additionally supports correspondence with private users according to its offer.

Since 1 January 2026, ADE is the normal route for registered electronic public correspondence unless special rules preserve another channel. Enable notifications, but log into the real mailbox rather than trusting the email preview. Open items before the applicable deemed-delivery consequence, download evidence of sending and receiving, and archive attachments. Do not send the same legal filing through several channels without explaining duplicates; the earliest effective delivery can control the deadline.

Each Polish portal has its own inbox, actions and proof. National sign-in does not merge them into one account. Before starting, identify where the result will appear and what receipt proves the action.

Map common tasks

• e-Urząd Skarbowy supports personal tax account information, correspondence, certificates, payments and selected returns; e-Deklaracje handles particular tax forms. Save the UPO for a filed declaration. A draft or accepted login is not submission.
• eZUS/PUE shows insurance registrations, contribution accounts, benefits, medical certificates and ZUS correspondence according to the user's role. Employee, insured person, payer and representative views differ. Download confirmation of any application and monitor the ZUS inbox.
• Internetowe Konto Pacjenta and mojeIKP show e-prescriptions, e-referrals, treatment information and permissions. They do not correct a clinic's medical entry by themselves; request correction from the provider that created it.
• Biznes.gov.pl and CEIDG handle sole-trader registration and many business filings. Verify representation and required signature. A private individual account is not automatically authorised to act for a company.
• praca.gov.pl covers employment-office and some foreign-work processes; Emp@tia covers selected family and social-assistance matters; KRK provides criminal-register services; MOS supports foreigner-application preparation. Each has its own permitted submission route and later in-person, biometric or collection steps.

Other specialist portals may accept bank identity, Profil Zaufany, e-dowód or qualified certificate through login.gov.pl. Read the final button and receipt text. “Save,” “sign,” “send” and “officially received” are different statuses.

Complete one transaction safely

1. Enter from the authority's official page and confirm the correct role and person.
2. Read document format, attachment size, signature and delivery channel requirements.
3. Prepare source files without passwords unless the service expressly supports them.
4. Sign only when required and inspect the final version after signing.
5. Submit through the named portal or ADE and download the official receipt.
6. Check the portal-specific inbox and ADE, because a request for evidence may arrive in one channel only.
7. Complete any appointment, originals, fee, biometrics, activation or physical collection. Online acknowledgement is not the final benefit, permit or document.

Keep a case folder with submitted form, attachments, signed artifacts, UPP/UPO, ADE evidence, payment, case number and decision. When appointing a representative, verify that the relevant portal and procedure record the authority; sharing your login is not representation. For an inaccessible service, use its supported proxy or paper/in-person alternative rather than giving another person your codes.

A digital credential proves only what its governing law and register provide. Check acceptance for the exact action, location and date. A screenshot, exported PDF or photograph of a document is not the live document and may not support verification.

Domestic identification

mDowód is a full identity document within Poland for the situations covered by Polish law, but it is technically and legally distinct from the plastic dowód osobisty. Present the live document in mObywatel and use its verification mechanism rather than handing over an unlocked phone. Some actions can still require the physical identity card, passport, a particular certificate or access to the underlying register, especially where special legislation says so.

Profil Zaufany authenticates supported public services and authorises a trusted signature. It does not prove a residence right or replace a passport, residence card or professional qualification. An e-dowód personal signature and a qualified signature also have different legal scopes. Ask the receiving party what electronic form it accepts before signing.

Foreign residents may use mObywatel services or a specifically authorised electronic document without qualifying for mDowód. The electronic temporary-protection document introduced under the 2026 protection rules confirms the specified residence status; it is not Polish citizenship or a general Polish ID card. Check whether a displayed foreigner document proves domestic identity, residence, travel or only a narrower capability.

Travel and cross-border use

mDowód is not a border-crossing document and does not replace a passport or physical Polish ID card for international travel. A phone screen that works at a Polish bank may be rejected by a foreign hotel, airline or border authority. Carry the travel document required by nationality, destination and residence status.

Temporary-protection and Diia.pl-related travel rules have changed over time. Verify the current Office for Foreigners rule, status validity, passport requirement and re-entry conditions before departure. A residence document normally accompanies, rather than replaces, a valid travel document. Losing UKR or another protection status can change what the app shows and the right to return.

Poland is working toward EU digital-identity-wallet capability, with further solutions announced for late 2026, but a planned or pilot capability is not present acceptance. Use today's receiving-service rule, not a future interoperability promise.

Preserve non-digital access

If a phone is unavailable, battery is dead or the system is down, use the accepted physical document or office route. ADE and portal deadlines do not disappear because notifications failed. Maintain recovery access and check official outage notices, then keep screenshots and timestamps when an outage blocks a deadline. Do not let a private business copy more identity data than its lawful purpose requires; use QR or verifier functions that disclose the necessary current data where available.

Treat the phone, SIM, email, bank identity and recovery method as one chain. A strong app PIN is insufficient if a criminal can replace the SIM, reset email or approve Profil Zaufany through compromised banking.

Harden the chain

Use a supported, updated device with screen lock, encryption and official app store. Enable device-location and remote-lock features, hide sensitive notification previews and do not root or jailbreak the phone. Give mObywatel and banking only necessary permissions. Use unique passwords for email, bank and government accounts, with strong multi-factor authentication where available.

Protect the mobile account with an operator PIN or password and ask how SIM replacement is authorised. Never approve an mObywatel push, bank prompt, SMS code or signature you did not begin. Authorities and banks do not ask you to install remote-control software or transfer money to a safe account. Verify every support contact from the official site.

Review Profil Zaufany contact data, authentication method, expiry and linked bank. Review trusted devices and sessions in email and bank. Keep recovery codes and identity-document details offline in a secure place. Do not share credentials with an accountant, family member or representative; grant authority through the procedure instead.

Use PESEL reservation for its actual purpose

An adult with PESEL can reserve it free and immediately through mObywatel, the web service or any municipality. Banks, lenders, notaries, telecom operators and other covered entities must check the register for specified transactions. Reservation does not invalidate PESEL or the identity document and ordinarily does not block healthcare, prescriptions, transfers, ATM withdrawals, official matters, work or travel.

Temporarily withdraw the reservation only for the specific covered transaction and set automatic re-reservation where available. After a status change, another change may be blocked for 30 minutes, so plan a notarial act, credit agreement or SIM replacement rather than toggling at the counter. Verify which party must check and at what moment; reservation does not prevent every fraud or every telecom action.

Enable alerts for reservation changes and checks where the service offers them. If a check appears that you did not trigger, preserve it, contact the named institution through an official channel, protect banking and report identity misuse.

For e-Doręczenia, enable notification to a controlled email but check the mailbox directly. Add a routine calendar check because legal delivery effects may arise even when an email is filtered. Download evidence and back up decisive correspondence. A notification is not the document; an inbox item is not safely archived until its attachments and proof are saved.

Recovery depends on what was lost: device, SIM, phone number, email, bank identity, password, physical ID or source-register accuracy. Act in an order that closes the attacker's paths before rebuilding access.

Lost phone or suspected takeover

1. From a trusted device, lock or erase the lost phone through the operating-system account and revoke its sessions where supported.
2. Ask the mobile operator to block the SIM. If SIM swapping is suspected, secure the operator account and obtain written timing of the replacement.
3. Contact the bank through its official emergency channel, block affected cards or access and review transactions and identity-provider approvals.
4. Change the primary email password, revoke sessions and repair recovery methods.
5. Reserve PESEL if identity misuse is possible, and preserve the service history.
6. Revoke or rebuild Profil Zaufany if its phone, email or bank authorisation is compromised. Notify police where theft, unauthorised access or financial crime is suspected.

If you still control the old authentication method, change contact data inside the official profile. If the old number is unavailable but you have e-dowód, official guidance allows login with the card and correction. Otherwise, you may need to invalidate the existing Profil Zaufany and confirm a new one through a bank or confirmation point. The point should invalidate the old profile first and confirm the new one second. Test signing afterward, not only login.

Reinstall mObywatel only from the official store and reactivate documents after securing email, SIM and bank. A new phone does not automatically recover every document or ADE access. Confirm the e-Doręczenia mailbox, notifications and unread correspondence; a lost device does not suspend delivery deadlines.

Lost document or incorrect data

Report a lost Polish identity card through the official ID process and a lost passport through the passport authority. Blocking the phone does not invalidate the physical document, and reporting the document does not secure the bank or SIM. A foreign resident reports a residence-card loss to the issuing immigration authority and follows its replacement and police instructions.

Correct data at its source. USC or municipality owns civil-status and PESEL data; the voivode or Office for Foreigners owns immigration records; ZUS owns insurance records; the healthcare provider owns its clinical entry; a bank owns its customer profile. Sending feedback to mObywatel may expose the fault but normally does not amend the source register.

Keep incident time, case numbers, confirmations, old and new contact data and screenshots. After recovery, verify Profil Zaufany expiry, ADE, portal inboxes, PESEL status, bank payees, trusted devices and active mObywatel documents. Challenge any unauthorised filing or payment through the authority or bank that received it; changing the password alone does not withdraw a forged submission.