Media Coverage of Aadhaar
View AllFor faster detection of spoofing bid, Aadhaar now comes with two-layer authentication
Aadhaar gets new security mechanism
उंगलियों के निशान से आधार सत्यापन का नया सुरक्षा तंत्र
UIDAI adopts new security mode for authentication
UIDAI using Al to upgrade fingerprint technology
Aadhaar Telecast
View AllPress Release
View All
UIDAI seeds 10.97 million Aadhaars with mobile numbers in February, 93% more than January
31 Mar 2023
UIDAI and SETS join hands to conduct R&D in deep-tech including Quantum Computing, IoT Security and Cyber Security
24 Mar 2023
UIDAI’s continued initiatives for strengthening the Aadhaar eco-system
23 Mar 2023
UIDAI makes online document update in Aadhaar free of cost; to benefit millions of residents
23 Mar 2023
UIDAI makes online document update in Aadhaar free of cost; to benefit millions of residents
16 Mar 2023
Aadhaar in Numbers
Frequently Asked Questions
As per the Supreme Court Judgement in the Aadhaar case (494 of 2012), residents are no longer required to mandatorily verify Bank account with Aadhaar. PAN Aadhaar linking is mandatory. A resident can voluntarily use his Aadhaar number in physical or electronic form by way of authentication or offline verification, or in such other form as may be specified by UIDAI. Mandatory Aadhaar authentication can be performed if the purpose is backed by law. However, for availing subsidies, benefits, services beneficiaries are required to undergo mandatory Aadhaar authentication pursuant to notification under section 7 of the Aadhaar Act, 2016 (as amended). When you link your bank account, demat account, mutual fund account, PAN, etc., with Aadhaar, you secure yourself because no one can impersonate you to avail these services. Often the fraudsters carry out transactions and transfer money from someone else’s account to their accounts and go untraced as they generally submit their fake identities to the bank while opening their accounts. They operate bank accounts in fictitious names/companies and run shell companies’ accounts to carry out money laundering or stash black money. Therefore, when all the bank accounts are verified with Aadhaar then it would not be possible for these unscrupulous elements to go untraced and banking as a whole would become more safe and secure as the identity of each bank account holders is established uniquely beyond doubt through eKYC. As of now 96 crore bank accounts out of total 110 crore accounts have been linked to Aadhaar.
At the same time, you also contribute to serve the vital national interests by making the system rid of bogus, fakes and duplicates who could misuse IDs to evade taxes, siphon off public money, etc. Through use of Aadhaar and other process improvements, the Government has been able to weed out more than 6 crore fakes, duplicates and ghosts beneficiaries and save more than Rs. 90,000 crore of public money. Also, ghost and shell entities and companies used to be created for tax evasion, money laundering, terror financing, etc. Verification of identity through Aadhaar has helped curb these practices. Similarly, use of Aadhaar has checked unscrupulous elements that used to resort to impersonation in various examination and tests for college admission and jobs, etc., and thereby denying the genuine candidates of their rightful dues. There are number of other areas where verification of identity through Aadhaar has brought in fairness and transparency in the system.
No. Just, by knowing your Aadhaar number, no one can harm you. It’s just like any other identity document such as passport, voter ID, PAN card, ration card, driving license, etc., that you have been using freely for decades with service providers. Aadhaar identity, instead, is instantly verifiable and hence more trusted. Also, as per the Aadhaar Act 2016, the Aadhaar card is required to be verified either by in physical or electronic formby way of authentication or offline verification, or in such other form as may be specified. Verification is done through fingerprint, iris scan, OTP authentication, and QR code etc. Hence, it is near impossible to impersonate you if you use Aadhaar to prove your identity. People have been freely giving other identity documents such as passport, voter ID, PAN card, ration card, driving license, etc. But did they stop using these documents for the fear that somebody would use them to impersonate? No! They continue using them and if any fraud happens, the law enforcement agencies handle them as per law. The same logic will apply to Aadhaar. In fact, Aadhaar is more secure than many other identity documents, because unlike other IDs, Aadhaar is instantly verifiable through biometric and OTP authentication and QR code. Further, under the Aadhaar Act, 2016 stringent penalties, including fines and imprisonment are provided whenever a person misuses your Aadhaar number or tries to cause any harm to you.
Under the PML Rules Aadhaar is one of the officially valid documents accepted for opening bank account and the bank is required to do other due diligence for banking transaction or KYC. If at all some fraudster tries to open bank account using Aadhaar and bank doensn’t carry any due diligence then in such case an Aadhaar holder cannot be held responsible for bank’s fault. It is just like if some fraudster opens a bank account by presenting someone else’s Voter card/Ration card, it is the bank that would be held responsible not the voter or ration card holder. Till date no Aadhaar holder has suffered any financial loss on account of such misuse.
No. As your bank information is not shared by the bank with anyone else, no one can have information about your bank account just by knowing your Aadhaar number. Also, UIDAI or any entity for that matter would not have any information about your bank account. For example, you give your mobile number at various places and to various authorities such as bank, passport authorities, income tax departments, etc. Would the telecom company have access to your bank information, income tax returns, etc.? Obviously no! Similarly, when you provide Aadhaar number to various service providers, your detail remains with the respective service providers and no single entity including the Government or UIDAI will have access to your personal information spread across various service providers.
Just like by merely knowing your bank account number, one cannot withdraw money from your account, similarly by merely knowing your Aadhaar number, no one can withdraw money from Aadhaar linked bank account. As in bank for withdrawing money, your signature, debit card, PIN, OTP, etc., is required, similarly for withdrawing money from your Aadhaar linked bank account through Aadhaar, your fingerprint, IRIS or OTP sent to your Aadhaar registered mobile will be required. No Aadhaar holder has suffered any financial or other loss or identity theft on account of any said misuse or attempted impersonation of Aadhaar. Notably, everyday more than 3 crore Authentications are carried out on the Aadhaar platform. In the last eight years, so far more than 3,012.5 crore authentications (till 28th May 2019) have been successfully done. UIDAI keeps upgrading and reviewing its security systems and safety mechanisms to make Aadhaar more secure and more useable. There has not been a single instance of biometric data breach from Aadhaar database. Therefore, people should freely use and give Aadhaar to prove their identity as and when required under the provisions of the Aadhaar Act, 2016.
Aadhaar authentication can be performed for availing benefits, services and benefits falling under Section 7 of the Aadhaar Act, 2016 and if the purpose for which Aadhaar authentication is intended to be used is either backed by law made by parliament or is in the State interest. The verification of Aadhaar can be done offline through QR code available on the physical Aadhaar copy. If any agency does not follow these best practices, then that agency will be fully responsible for situations or losses arising out of possible misuse or impersonation. An Aadhaar holder is not responsible for the wrongful act of or by any agency.
Mask Aadhaar option allows you to mask your Aadhaar number in your downloaded e-Aadhaar. Masked Aadhaar number implies replacing of first 8 digits of Aadhaar number with some characters like “xxxx-xxxx” while only last 4 digits of the Aadhaar Number are visible.
Resident can download e-Aadhaar by following two ways.
- By Using Enrollment Number:Resident can download e-Aadhaar using 28 digit enrolment no. along with Full Name and Pin code. In this download process OTP is received on registered mobile no. Resident can also use TOTP to download e-Aadhaar instead of OTP. TOTP can generated using mAadhaar mobile Application.
- By Using Aadhaar No:Resident can download e-Aadhaar by using 12 digits Aadhaar No. along with Full Name and Pin code. In this download process OTP is received on registered mobile no. Resident can also use TOTP to download e-Aadhaar instead of OTP. TOTP can generated using mAadhaar mobile Application.
As per Aadhaar Act, e-Aadhaar is equally valid like Physical Copy of Aadhaar for all purposes. For UIDAI circular on validity of e Aadhaar, please visit https://uidai.gov.in/images/uidai_om_on_e_aadhaar_validity.pdf
Computer must be connected to internet while validating digital signature.
- Download your E-Aadhaar and open the pdf in Adobe Reader only
- Right click on the 'validity unknown' icon and click on 'Validate Signature'
- You will get the signature validation status window, click on 'Signature Properties'.
- Click on 'Show Signer's Certificate.'
- Verify that there is a certification issued by the name '(n)Code Solutions CA 2014'.
- On Summary page(tab), Click on 'Export'
- Click 'Next' to save the certificate in your local system (Desktop/Laptop).
- After that click 'Next' and then 'Finish'
- Click on 'Trust' tab, then Click on 'Add to trusted certificate'. After that Select all three options under 'Certified documents' and click 'Ok'
- Click again on 'Validate Signature' and close the window
- Once ' (n)Code Solutions CA 2014' has been as a Trusted Identity, any subsequent documents with digital signatures from CCA will be validated automatically when opened.
- In case Certificate validity is seen to have an expired certificate, on the machine; you are requested to download the E-Aadhaar once again and re-validate the signature, using the said procedure given in above points and add the newly downloaded certificate again to 'Trusted Certificate' category on local machine for adding valid/current digital certificate.
- The invalid digital signature on the downloaded e-Aadhaar can also be validated on another machine, other than the machine where it was downloaded i.e. Laptop/Desktop. However, for this document to be validated, the digital certificate needs to be downloaded and validated as per the procedure above on the alternate machine.
Note: - Once 'NIC sub-CA for NIC 2011, National Informatics centre' has been as a Trusted Identity, any subsequent documents with digital signatures from CCA will be validated automatically when opened.
e-Aadhaar is a password protected electronic copy of Aadhaar, which is digitally signed by the competent Authority of UIDAI and can be downloaded from the official website or mobile Application of the UIDAI.
Resident needs 'Adobe Reader' to view e-Aadhaar. You have 'Adobe Reader' installed in your System. To install Adobe Reader in the System visit https://get.adobe.com/reader/
Combination of the first 4 letters of name in CAPITAL and the year of birth (YYYY) as password.
For Example:
Example 1
Name: SURESH KUMAR
Year of Birth: 1990
Password: SURE1990
Example 2
Name: SAI KUMAR
Year of Birth: 1990
Password: SAIK1990
Example 3
Name: P. KUMAR
Year of Birth: 1990
Password: P.KU1990
Example 4
Name: RIA
Year of Birth: 1990
Password: RIA1990
Resident can download e-Aadhaar by visiting UIDAI websites - https://uidai.gov.in/ or by visiting https://myaadhaar.uidai.gov.in
Yes, Aadhaar profile in a phone will automatically get deactivated the moment the same profile is registered in another mobile. Aadhaar can be registered only in one device at a time.
The mAadhaar app for iPhone is compatible for iOS 10.0 and above.
. mAadhaar App is available for both Android and iPhone users in India. In order to install the app follow the steps given below:
- Visit the Google Play Store for Android and to App Store for iPhone.
- Type mAadhaar in the search bar and download, or download mAadhaar Android version from https://play.google.com/store/apps/details?id=in.gov.uidai.mAadhaarPlus&hl=en_IN or iOS version from https://apps.apple.com/in/app/maadhaar/id1435469474.
- To make sure you are downloading the right app, check to see if the developer’s name is listed as ‘Unique Identification Authority of India’
- Once you open the app, it takes you through the terms and conditions and usage guidelines and language preference settings. Please go through them carefully before continuing further.
mAadhaar is more than Aadhaar card in a wallet. Using the mAadhaar App, the resident can avail the following benefits:
Get Aadhaar by Downloading or by retrieving lost or forgotten Aadhaar
*****
- View/Show Aadhaar in offline mode, particularly when residents are required to show their ID proof
- Update Address in Aadhaar via document or without document proof
- Keep/Manage Aadhaar of family members(up to 5 members) in one mobile
- Share Paperless eKYC or QR code to service providing agencies
- Secure Aadhaar by Locking Aadhaar or Biometrics
- Generate or Retrieve VID which user can use in the place of Aadhaar to avail Aadhaar services (for those who have locked their Aadhaar or do not wish to share their Aadhaar).
- Use Aadhaar SMS services in offline mode
- Check Request Status Dashboard: After enrolling for Aadhaar, ordering reprint or updating Aadhaar data, resident can check the status of the service request in the App.
- Help others who don’t own a smartphone in availing Aadhaar services with the help of common services.
- Get Update history and Authentication records
- Book Appointment to visit Aadhaar Seva Kendra
- Aadhaar Sync feature allows resident to fetch the updated data in Aadhaar profile after successful completion of an update request.
- Time-based One-Time Password can be used instead of SMS based OTP to avail Aadhaar Online Services available on the UIDAI Website
- Locate Enrolment Centre (EC) helps user find nearest enrolment Centre
- The More section in the App includes information about the mAadhaar App, Contact, Usage guidelines, Terms & Conditions of using the app and other necessary information.
- Apart from helpful FAQs and link to Chatbot the More section also contains links to important documents from where resident can download the Aadhaar enrolment or Aadhaar update/correction forms.
*****Resident can raise request for Order Aadhaar PVC Card using Aadhaar number or Virtual ID or Enrolment ID by paying a nominal charge of Rs. 50/-. Aadhaar PVC Card is delivered to the resident at the address registered with Aadhaar Database by Speed Post service of India Post. For accessing mAadhaar app , internet connectivity is required but QR code scanning through mAadhaar works in online/offline mode.
No. Anyone in India with a smartphone can install and use mAadhaar App.
Without an Aadhaar registered mobile number resident will be able to avail only a few of the services such as Order Aadhaar reprint, Locate Enrolment Center, Verify Aadhaar, Scanning QR code etc.
However registered mobile number is mandatory to avail all other Aadhaar services and Aadhaar Profile services listed under My Aadhaar. Resident can register their profile in an App installed in any smartphone. However the OTP will be sent to only their registered mobile.
Keeping the security and privacy of the Aadhaar holders in mind the app does not provide save password feature in the app. Hence the user will be required to enter password every time they wish to access profile or My Aadhaar.
Only someone with an Aadhaar linked to a registered mobile number can create Aadhaar profile in the mAadhaar App. They can register their profile in an App installed in any smartphone. However the OTP will be sent to only their registered mobile. Steps to register Aadhaar profile are given below:
- Launch the app.
- Tap on the Register Aadhaar tab on the top of main dashboard
- Create a 4 digit Pin/Password(memorize this password, as it will be required to access profile)
- Provide Valid Aadhaar & enter valid Captcha
- Enter Valid OTP and submit
- The profile should get registered
- The registered tab would now display the registered Aadhaar Name
- Tap on My Aadhaar tab on the bottom menu
- Enter 4-digit Pin/Password
- My Aadhaar Dashboard appears
The profile can be viewed by tapping on the profile summary on the top (profile image, name and Aadhaar number on the cyan tab) in the main dashboard. Steps to access the Aadhaar profile :
- Launch the app.
- Tap on the Aadhaar Profile tab on the top at the bottom of main dashboard
- Enter 4 digit Pin/Password(created earlier while registering profile)
- The front side of the Aadhaar appears. Slide to left to view the back side.
- In order to view other added profiles, keep sliding to left
Note: To view the Aadhaar Profile page and access the services within tap on the My Aadhaar tab at the bottom of the Dashboard screen.
No, the facility to update demographic details such as Name, DoB, Mobile number aren’t not available in the mAadhaar app. Only address update via document facility is currently available.
However the demographics updates features may be included in future releases.
mAadhaar app provides same services to both iOS and Android device users. The functionality and UX remains same irrespective of devices (iOS, Android).
No. Anyone in India with a smartphone can install and use mAadhaar App.
Without an Aadhaar registered mobile number resident will be able to avail only a few of the services such as Locate Enrolment Center, Verify Aadhaar, Scanning QR code etc.
However registered mobile number is mandatory to avail all other Aadhaar services and Aadhaar Profile services listed under My Aadhaar. Resident can register their profile in an App installed in any smartphone. However the OTP will be sent to only their registered mobile.
mAadhaar app can be used anywhere anytime within India. mAadhaar is more than Aadhaar card in a wallet. On one hand the mAadhaar profile is accepted as a valid ID proof by Airports and Railways on the other resident can use the features in the app to share their eKYC or QR code with service providers who sought Aadhaar verification of their customers before providing Aadhaar services.
Residents can share the XML ZIP file along with the Share Code to the service provider as per their mutual convenience.
Any Aadhaar number holder who desires to establish his/her identity to any service provider (OVSE) using digitally signed XML downloaded from UIDAI website can be a user of this service. The service provider should have provisions of providing this Aadhaar Paperless Offline e-KYC at their facility and do the offline verification
The process of Aadhaar Offline e-KYC Verification by Service Provider is:
- Once service provider obtains the ZIP file, it extracts the XML file using the password (share code) provided by the resident.
- The XML file will contain the demographic details such as Name, DOB, Gender and Address. Photo is in base 64 encoded format which can be rendered directly using any utility or plane HTML page. Email Address and Mobile number are hashed.
- Service Provider has to collect Email Address and Mobile number from residents and perform below operations in order to validate the hash:
Mobile Number:
Hashing logic: Sha256(Sha256(Mobile+ShareCode))*number of times of last digit of Aadhaar Number
Example :
Mobile number: 9800000002
Aadhaar Number: 123412341234
Share Code: Abc@123
Sha256(Sha256(9800000002+ Abc@123))*4
In case if Aadhaar Number ends with Zero or 1 (123412341230/1) it will be hashed one time.
Sha256(Sha256(9800000002+ Abc@123))*1Email Address:
Hashing Logic: This is a simple SHA256 hash of the email without any salt
- Entire XML is digitally signed and Service Provider can validate the XML file using the signature and public key available on the UIDAI website.(https://uidai.gov.in/images/uidai_offline_publickey_26022019.cer).
Service Providers shall not share, publish or display either XML or Share Code or its contents with anyone else. Any non-compliance of these actions shall invite actions under Sections 29(2), 29 (3), 29(4) and 37 of The Aadhaar Act, 2016 (as amended) and sub regulation 1A of regulation 25, regulation 14A of The Aadhaar (Authentication and Offline Verification) Regulation, 2021 and regulation 6 and 7 of The Aadhaar (Sharing of Information) Regulation, 2016.
The process of generating Aadhaar Offline e-KYC is explained below:
• Go to URL https://myaadhaar.uidai.gov.in/offline-ekyc
• Enter ‘Aadhaar Number’ or ‘VID’ and enter mentioned ‘Security Code’ in screen, then click on ‘Send OTP’. The OTP will be sent to the registered Mobile Number for the given Aadhaar number or VID. OTP will be available on m-Aadhaar mobile Application of UIDAI. Enter the OTP received. Enter a Share Code which be the password for the ZIP file and click on ‘Download’ button
• The Zip file containing the digitally signed XML will be downloaded to device wherein the above mentioned steps have been performed.
The Offline Aadhaar XML can also be downloaded from mAadhaar app.
Identity verification can simply be accomplished by providing an identity document like PAN card, Passport etc to the service provider. However, all these documents, which may be used for identification can still be forged and faked which may or may not be possible to verify offline instantaneously. The document verifier has no technological means to verify the authenticity of the document or the information it contains and has to trust the document producer. Whereas, the XML file generated by the Aadhaar number holder using Aadhaar Paperless Offline e-KYC is digitally signed document using UIDAI digital signature. Thus, the service provider can verify the demographic contents of the file and certify it to be authentic when doing the offline verification
It is a secure sharable document which can be used by any Aadhaar number holder for offline verification of Identification.
A resident desirous of using this facility shall generate his/her digitally signed Offline XML by accessing UIDAI website. The Offline XML will contain Name, Address, Photo, Gender, DOB, hash of registered Mobile Number, hash of registered Email Address and reference id which contains last 4 digits of Aadhaar Number followed by time stamp. It will provide Offline Aadhaar Verification facility to service providers/Offline Verification Seeking Entity (OVSE) without the need to collect or store Aadhaar number.
Public certificate for Digital signature validation can be downloaded from here.
