What the digital certificate actually does

The FNMT Digital Certificate (Certificado de Persona Física, issued by the Fábrica Nacional de Moneda y Timbre) is a cryptographic credential installed in your browser that lets Spanish government websites verify your identity with legal certainty.  It constitutes a qualified electronic signature under EU eIDAS regulation, legally equivalent to a handwritten signature for official purposes.

What this means practically: you can file your own tax returns with the AEAT, view and pay Social Security contributions on the TGSS portal, read official government correspondence in your Carpeta Ciudadana mailbox, sign declarations and authorizations without printing anything, and check your TIE renewal status online: all without traveling to an office.

For most Digital Nomad Visa holders in the first year, the certificate becomes essential once you become a tax resident and start interacting with the AEAT and TGSS. If you have a gestor handling your filings, they act under their own professional credentials.  You do not need the certificate for your gestor to file on your behalf.  But you still need it to read your own correspondence, access Carpeta Ciudadana, and sign documents when needed.

Step 1 — Choose and prepare your browser

Use Mozilla Firefox. This is not a suggestion.  It is the most reliable path for the FNMT process.  Here is why this matters:

  • The FNMT links the certificate to the browser’s cryptographic state at request time.  The download must happen in the same browser instance on the same machine.
  • Firefox manages its own certificate store independently of the operating system.  This makes the install/export/backup cycle predictable and reversible on all platforms.
  • Chrome and Edge use the Windows Credential Store or macOS Keychain respectively.  FNMT certificates can work in these browsers, but the import path is less straightforward and more prone to errors, particularly on macOS Ventura and later.

If you don’t have Firefox installed, download it now before proceeding.  Do not do the initial request in one browser and the download in another.  The FNMT will not serve the certificate.

Step 2 — Request the certificate online

  1. Go to the FNMT’s certificate request page: sede.fnmt.gob.es → Certificados → Persona Física → Obtener Certificado Software.
  2. Click “Solicitar Certificado.” You will be asked to enter your NIF/NIE. Enter your NIE (the letter-number-letter format you received on your resolution letter or visa stamp).
  3. Fill in the required fields and submit.  The FNMT system sends an application code (código de solicitud) to your email.  This is the code you will present at the in-person verification step.
  4. Do not close Firefox, do not clear your browser data, and do not uninstall Firefox.  The code is tied to this browser session.
Keep the application code safe

The code arrives by email and is also displayed on screen.  Write it down or store it somewhere accessible.  You will need it at the in-person appointment and again when downloading the certificate.

Step 3 — In-person identity verification

Within a reasonable window after the online request (the FNMT recommends doing this the same day, though in practice a few days is fine), you must appear in person at a registered verification office with your application code and your identity documents.

Where to verify

The most accessible options for foreign residents:

  • AEAT (Agencia Tributaria) offices: Spain’s tax authority accepts FNMT verifications at most of its offices.  No prior appointment needed at many offices.  Check the AEAT website for your city.  This is usually the fastest option.
  • TGSS (Tesorería General de la Seguridad Social) offices: Social Security offices also serve as verification points.  Appointment may be needed at busy offices.
  • Participating Ayuntamientos: Some town halls are registered verification offices.  Check the FNMT’s official list of oficinas de registro, search “FNMT oficinas de acreditación” for the current list.
  • Correos (Post Office): Selected Correos branches are authorized verification points.  Less reliable for foreign documents: the staff experience with NIEs varies.  Use AEAT if possible.

What to bring to the verification appointment

  • Your application code (from the email or the screen printout)
  • Your passport (original, not a copy)
  • Your NIE documentation: your TIE card, or your resolution letter from the UGE showing your NIE, or your visa stamp in your passport if it shows the NIE

The clerk verifies your identity against the NIE in the national database, records the verification, and confirms that your certificate can now be downloaded.  The appointment takes 5–⁠10 minutes.

Step 4 — Download and install the certificate

  1. Return to your original computer, the same machine and the same Firefox browser you used for the online request.
  2. Go back to sede.fnmt.gob.es → Certificados → Persona Física → Descargar Certificado.
  3. Enter your NIE and your application code.  The FNMT generates and installs the certificate into Firefox’s certificate store.
  4. You will see a confirmation that the certificate has been installed.  Verify it is there: in Firefox, go to Preferences (or Settings) → Privacy & Security → Certificates → View Certificates.  Your certificate should appear under the “Your Certificates” tab with your name and NIE.

Step 5 — Back up the certificate immediately

This step is not optional.  If your computer is lost, reformatted, or fails after this point, and you have no backup, you must repeat the entire process including the in-person appointment.  The backup takes 2 minutes.

  1. In Firefox: Preferences → Privacy & Security → Certificates → View Certificates → Your Certificates tab.
  2. Select your certificate and click “Back Up.”
  3. Choose a strong password for the backup file and save the .p12 file to a location that is NOT your local hard drive only.  Use a USB drive, encrypted cloud storage, or a password manager that supports file attachments.
  4. Store the password separately from the file.  If you lose the password to a .p12 file, the file is unrecoverable.

The .p12 file (also called .pfx) is your certificate in portable form.  With it and the password, you can install the certificate on any computer in any browser.

Installing on additional computers or browsers

Once you have the .p12 backup:

  • Firefox on another machine: Preferences → Privacy & Security → View Certificates → Your Certificates → Import.  Select the .p12 file, enter your password.  Done.
  • Chrome or Edge on Windows: Double-click the .p12 file to open the Certificate Import Wizard, install it in “Personal” store for the Current User.  Chrome and Edge pick it up automatically from the Windows certificate store.
  • Chrome or Safari on macOS: Double-click the .p12 file to import it into Keychain Access.  Select “login” keychain.  Enter your password.  Both Chrome and Safari read from the macOS keychain and will recognize the certificate once it is there.  You may need to mark it as trusted in Keychain Access: right-click → Get Info → Trust → Always Trust for this certificate.

Cl@ve: the simpler alternative for everyday tasks

Spain also runs the Cl@ve system, a simpler identity mechanism that many residents use alongside or instead of the digital certificate.  Cl@ve has two levels:

  • Cl@ve PIN: Generates a one-time PIN sent to your mobile.  Use it for occasional, lower-stakes interactions, viewing a document, checking status.  Valid for 10 minutes per session.
  • Cl@ve Permanente: A username and password system, activated once via a Cl@ve registration process.  More convenient for regular use.

Cl@ve works for many citizen-facing interactions on sede.agenciatributaria.gob.es, the TGSS portal, and Carpeta Ciudadana.  It does not support digital signatures for legal documents or filings that require a qualified electronic signature.  For quarterly autónomo tax filings (Modelo 130, Modelo 303), the full digital certificate is required.  Cl@ve is not a substitute.  It is a complement.

To set up Cl@ve: visit the Cl@ve registration portal and register with your NIE and a mobile number.  You will receive a letter to your registered address (padrón address) with an activation code: another reason to get your empadronamiento done first.

What you can do with the certificate

  • AEAT (sede.agenciatributaria.gob.es): File your annual IRPF return, view your tax history and records, file quarterly Modelo 130 and Modelo 303, respond to communications, apply for Beckham Law via Modelo 149
  • TGSS (sede.seg-social.gob.es / Import@ss): Register as autónomo, view and manage your RETA contributions, access your Social Security history, request a vida laboral (employment history certificate)
  • Carpeta Ciudadana (carpetaciudadana.gob.es): Your centralized government mailbox.  Official notifications from all Spanish agencies land here.  Mandatory for registered autónomos and tax residents to check regularly
  • Sede Electrónica del Ministerio del Interior: Check TIE renewal status, track applications, file certain immigration documents
  • Sede Electrónica de tu Ayuntamiento: Request empadronamiento volantes, pay local taxes, handle municipal registrations
  • Notarial filings: Some notarial acts can be signed digitally with the FNMT certificate.  Useful for powers of attorney and declarations you do not want to execute in person

Renewal and expiry

FNMT certificates are valid for 4 years from the date of issue.  The FNMT sends a reminder email before expiry.  The renewal process is simpler than the initial setup: if your NIE is still active and your certificate is not yet expired, you can renew it entirely online, no new in-person appointment.  Log in to sede.fnmt.gob.es while your existing certificate is still valid, request a renewal, and the new certificate replaces the old one in your browser.  Do not let the certificate expire before renewing.  If it expires, you must restart the full process including the in-person step.

Common technical problems

  • “This certificate is already installed”: You or someone on the machine previously installed the certificate.  Check Firefox’s certificate store.  It may already be there.
  • Download fails after in-person verification: Usually a browser mismatch (different browser from the request) or the session has expired.  Try the download within a few days of verification.  If it genuinely fails, contact the FNMT via their support form.
  • Government portals say the certificate is not valid: The certificate must match your NIE exactly as it appears in government databases.  If your NIE was registered with a different formatting (some systems strip leading zeros), contact the AEAT or FNMT support to reconcile the records.
  • macOS Keychain says the certificate is not trusted: Right-click the certificate in Keychain Access → Get Info → expand the Trust section → set “When using this certificate” to “Always Trust.” This is a common macOS issue unrelated to the certificate itself.
  • Firefox on macOS Monterey/Ventura rejects the certificate download: Known intermittent issue.  Try: disable any browser extensions, ensure JavaScript is enabled, and try from a private window (which uses Firefox’s own certificate store).  If the problem persists, use a Windows machine or a different Firefox profile.

Yes, if your NIE is already active in the Spanish national database.  This happens as soon as the UGE issues your resolution or your consulate stamps your visa.  You can request the certificate online immediately, then verify at an AEAT or Social Security office with your passport and the NIE shown on your visa or resolution letter.  You do not need the physical TIE card for the verification appointment.

Firefox is the most reliable.  The FNMT certificate is installed in the browser’s own certificate store, and Firefox handles this consistently across Windows, Mac, and Linux.  Chrome and Edge use the operating system’s certificate store (Windows Keychain or Mac Keychain), which sometimes causes import and recognition issues.  If you use Chrome: install the certificate via Firefox first, export it, then import it into your OS keychain for Chrome to pick up.  Safari on Mac also uses the OS keychain and generally works once the certificate is there.

Yes, the FNMT links the certificate request to the specific browser session and computer where you submitted the application code.  You must return to the same computer and the same browser to download the certificate after in-person verification.  If you change computers, the link breaks and you must restart the process.  Do not format or replace your computer between request and download.

If you backed up the certificate file (a .p12 or .pfx file), you can reinstall it on a new machine.  If you did not back it up, you must repeat the entire process: online request, in-person verification appointment, same-browser download.  This is the most common avoidable pain with the FNMT certificate.  Back it up on the day you install it.

No.  They are different systems for different purposes.  Cl@ve (PIN or Permanente) is a simpler identity verification system that uses a username/password or SMS code.  It works for many citizen-facing procedures like viewing your tax history or signing up for services.  The FNMT Digital Certificate is a stronger cryptographic credential that covers everything Cl@ve does plus digital signatures, legal documents, and professional filings.  For autónomos filing quarterly returns, the certificate is what you use.

Your gestor can act as your authorized representative without needing your personal certificate.  They use their own professional accreditation.  You do not need to share your certificate with your gestor.  Your certificate is for your personal government interactions: reading your tax notifications, checking your Social Security status, accessing Carpeta Ciudadana, and signing documents when needed.

This guide is informational, not legal advice.  FNMT procedures and portal interfaces change.  Verify the current steps at sede.fnmt.gob.es.  Last updated: 3 October 2026.