SPID in Italy: activation, costs, security and support

Choose a provider on practical criteria, complete activation, and manage login, recovery and security with a clear view of each procedure and fee.

Important information

Percorso Cittadino helps you understand Italian administrative procedures but does not replace public authorities. Before submitting applications or making decisions, always verify the official institutional links provided on this page.

SPID is a digital identity issued by an accredited Identity Provider. It proves who you are online when an Italian public authority or participating private service offers the “Entra con SPID” sign-in option.

This guide is for people who need to use SPID in Italy: it explains how to select a provider, prepare for identification, understand costs and security levels, and find the right support. Provider procedures change, so use the official comparison tool and recheck the selected provider’s terms before applying.

SPID at a glance

Standard application
From age 18; a dedicated process applies to minors
Who issues it
An Identity Provider recognised and supervised by AgID
What an adult needs
Valid Italian ID, Italian tax code, email and mobile
Costs
Verification charges and recurring fees depend on the provider
Security level
The service decides; level 2 adds a second factor
Support
Provider for credentials; service operator if SPID works elsewhere

Section 1

What SPID is and when it is useful

It is a personal sign-in identity, not a central website containing all your public-service records.

SPID stands for Sistema Pubblico di Identità Digitale, Italy’s Public Digital Identity System. A private Identity Provider accredited by AgID creates and manages the identity; a participating public or private service relies on it to recognise the person signing in.

You may encounter it when viewing personal records, submitting an application or signing in to a secure online account. SPID gets you through the identity check. What you can do after login still depends on the authority, the procedure and the security level requested.

A practical four-step route

  1. Check the destination service

    Look for “Entra con SPID”, “Entra con CIE”, or both before applying for anything new.

  2. Compare providers

    Consider verification, security levels, use from abroad, support and current fees.

  3. Complete identity verification

    Registration and proof of identity are separate stages governed by the selected provider.

  4. Protect access and contacts

    Keep your email, mobile number, provider app and second factor personal and up to date.

Back to contents

Section 2

SPID and CIE are separate ways to sign in

There is no need to rank them in the abstract: start with the options shown by the service and the identity you already have.

Practical differences
PointSPIDCIE
IssuerA digital identity from an accredited providerA state identity document with digital identity functions
What you useProvider credentials and its second factorCieID credentials or the card, PIN and a compatible device, depending on the level
Where it worksServices displaying a SPID sign-in optionServices displaying a CIE sign-in option
How they connectSome providers let you use CIE to complete SPID identificationHolding a CIE does not automatically create a SPID identity

Many Italian public services display both buttons, but the two methods are not universally interchangeable. A private service in particular may support one and not the other.

If your CIE digital credentials are already active, use them where offered. You may also be able to use the physical CIE to verify your identity during a provider’s SPID application.

Back to contents

Section 3

Who can apply

The standard route is for adults with Italian ID; applications from abroad, foreign nationals and minors need closer attention.

Adult in Italy

May apply independently with a valid Italian identity document and Italian tax code.

Italian citizen abroad

May use a verification method enabled for Europe or worldwide, or an active consular RAO office.

Foreign national in Italy

Needs an Italian identity document; a residence permit on its own is not enough.

Minor

A parent starts the process with their own provider, and use depends on age and the service.

Back to contents

Section 4

Identity documents, tax code and contact details

Preparing the exact items reduces failed registrations and future recovery problems.

Standard checklist

  • A valid Italian identity document: identity card, passport or driving licence.
  • Italian health card, tax-code card or certificate of tax-code assignment.
  • A personal email address that you can access.
  • A personal mobile number that you can access.
  • A smartphone, webcam, CIE/CNS, reader or digital signature only if required by your chosen method.

The email address and mobile number do not have to be legally registered in your name, but they must be under your personal control. Different people’s SPID identities need different contact details.

A work email or phone can become a recovery problem when employment ends. A long-term personal contact is generally the safer choice.

Back to contents

Section 5

Choosing an Identity Provider

All enabled providers issue credentials valid for SPID access, but their day-to-day service is not identical.

Compare what will affect you

  • A verification method you can actually complete and its availability in your location.
  • Security levels offered and the level required by the service you plan to use.
  • Use from abroad and support for your mobile country code.
  • Second-factor options through an app or OTP, including any SMS conditions.
  • Published timing and the availability of support.
  • Any initial verification charge and any recurring provider fee.
Back to contents

Section 6

Identity verification and fees are separate questions

A one-off charge for proving your identity is not the same as a recurring fee for keeping provider access available.

In person

At provider offices, contracted locations or active public RAO identification desks.

Remote operator

A webcam appointment, subject to the provider’s availability and terms.

Recorded video and bank transfer

A guided audio-video recording paired with a small bank transfer, where the provider offers it.

Electronic documents and certificates

CIE or e-passport through an app, or CIE, CNS or digital signature with the required equipment.

Initial charge
A possible price for the chosen identity-verification method. It may vary even within one provider.
Recurring charge
A fee that the provider’s terms may apply after issuance. It cannot be inferred from the verification price.
If the PosteID annual fee is not paid

The official page says the SPID access function is suspended when payment is overdue. The holder has 24 months from the last access to pay and restore it, and no amount is due for the suspension period. Check your individual deadline and the current PosteID terms before taking action.

Back to contents

Section 7

From registration to the first login

Start from the provider’s official website and read each request before authorising it.

  1. Open the provider website

    Reach it through the official SPID comparison or type the known domain; avoid links in unexpected messages.

  2. Enter your details

    Complete the personal data and contacts and create credentials under the displayed security rules.

  3. Prove your identity

    Use the method selected and confirm any price before proceeding.

  4. Set up the required authentication

    If you need SPID level 2 or 3, set up the provider app, OTP delivery or other required method, and store recovery information securely.

  5. Test a login

    Open your intended service, select the provider and check the service name and request before approval.

Back to contents

Section 8

What SPID levels 1, 2 and 3 mean in practice

The level measures the strength of authentication required; it does not describe a package of services.

How login changes
LevelWhat is requestedPractical meaning
SPID level 1Username and passwordOne-factor access where the service considers it sufficient
SPID level 2Credentials plus an OTP or approval in the provider appA second factor for services requiring stronger assurance
SPID level 3Credentials plus further security and, where applicable, a physical device from the providerAccess where the service requires the highest SPID level

The destination service decides which level it needs. If you see a level error, repeated attempts will not solve it: check whether your provider offers that level and whether it is active for your identity.

Identity Providers do not necessarily offer the same combinations. Recheck the official comparison before choosing one for a service with a specific requirement.

Back to contents

Section 9

Password, provider app and OTP

A sign-in begins with your credentials and may require a confirmation valid only for that session.

Password
A lasting secret linked to the identity. Do not reuse it on other services or disclose it to support.
OTP
A short-lived, usually one-time code. Enter it only in the login flow you started.
Provider app
It may generate a code or show an approval request. Read the named service and action before confirming.
Authorisation
It confirms one login. An unexpected notification may mean someone else has your credentials.

Before approving

  • You initiated the login moments earlier.
  • The service shown is the one you intend to use.
  • The website domain and provider name are correct.
  • Nobody is asking for the code by phone, chat or email.
Back to contents

Section 10

Find where the login failed

Trying a second known service can separate an identity problem from a fault on one website.

Problem and first contact
What happensFirst checkWho to contact
Password, OTP or provider app fails on several servicesContacts, app, device time and identity statusIdentity Provider
The provider reports suspension or details to updateProvider account and genuine provider noticesIdentity Provider
SPID works elsewhere but not on one websiteRequired level, login page and service maintenanceAuthority or service operator
An application or record is missing after loginAccount profile, any delegation and procedure requirementsAuthority managing the application or record
Back to contents

Section 11

Recovery, contact changes and suspension

These actions belong to the provider that issued the identity, not to a central SPID account.

Act before access is lost

  • Update the mobile number and email through the provider’s published process.
  • Keep recovery information separate and periodically confirm that it still works.
  • Update the identity document when the provider requests it or when it expires.
  • If a phone is lost, use the provider’s process to disconnect, recover or reconfigure the app promptly.
  • After an unrecognised login, change the password and request suspension or blocking through the official channel.

There is no recovery process shared by every provider. Some use the online account; others may require fresh identification or help from support.

The official SPID support directory maintains the providers’ current contact channels and is safer than details copied from a message or an unverified result.

Back to contents

Section 12

Italian citizens living abroad

You can apply from abroad, but the provider and verification method must support the country where you are located.

What an adult applicant needs

  • A valid Italian identity card, passport or driving licence.
  • An Italian tax code, health card or valid certificate assigning the code.
  • A personal email address.
  • A personal mobile number, which may be foreign.

Selecting a route

  1. Open the comparison tool

    Choose an online verification method marked for use in Europe or worldwide.

  2. Check the foreign number

    Confirm in the provider’s current terms that your country and calling code are supported.

  3. Consider a consular RAO

    Some active consular offices can perform identification; check the official list and appointment rules.

Back to contents

Section 13

Foreign nationals living in Italy

The key requirement is the accepted Italian identity document, not a residence permit by itself.

A foreign national may apply with a valid Italian identity document, Italian tax code, personal email address and personal mobile number.

An Italian residence permit is not accepted on its own for SPID. Depending on the applicable registration process, it can be used to obtain the Italian identity card needed before starting a SPID application.

Back to contents

Section 14

SPID for minors

The identity belongs to the child and is requested and supervised under specific parental-responsibility rules.

  1. The parent starts with their own provider

    The request can be made only to the Identity Provider where the parent already holds SPID, using level 2 credentials.

  2. The provider identifies the child

    Documents, any requirement for the child to attend in person, authorisations and authentication follow the provider process and AgID guidelines.

  3. The service determines access

    Before age 14, only online services offered by schools are allowed; from 14 to 17, access depends on the required authorisation and on whether the service admits minors.

  4. A decision is required at 18

    The provider blocks access until the new adult expressly decides whether to keep or revoke the identity.

AgID guidelines cover issuance from age 5. A personal email address is required for the child, while a mobile number is optional.

The parent’s number may receive security messages, but it cannot be used as the child’s second factor for a SPID level 2 login.

Back to contents

Section 15

Security and phishing

The safest habit is to initiate the action yourself on the official website or app instead of following an unexpected prompt.

Practical safeguards

  • Never disclose a password, OTP or provider-app code to another person, including someone claiming to be support.
  • Check the domain before entering credentials; an SPID or AgID logo does not prove that a page is genuine.
  • To verify, renew, recover or unlock the identity, close the message and directly open the provider’s official website or app.
  • Approve an app request only when you have just initiated the login and recognise the service.
  • If you entered SPID credentials or approved a suspicious login, change the password immediately and contact the provider through its official channel. If you disclosed bank or card details, also contact the bank or card issuer using official contact details.
Back to contents

Section 16

Expiry, renewal and system continuity

The lifecycle of your own identity is different from the national agreements under which providers operate.

Your identity
Contract terms, renewal, password rules, linked documents, suspension and revocation depend on the provider.
The SPID system
AgID announced renewal of the Identity Provider agreements through 2027.

The general sources do not give one expiry date shared by every SPID identity. Check the provider’s account dashboard and current terms, and update documents and contact details in time.

The renewed agreements support the continuity announced by AgID. They do not justify saying that SPID is about to close, nor do they predict the identity model that will apply in the future.

Back to contents

Section 17

Related guides

Continue only with the part that supports the Italian service you need to use.

Back to contents

Section 18

Frequently asked questions

Practical answers to common questions before and after activation.

Is SPID free?

There is no single answer covering every stage and provider. Initial identity verification may be free or paid, and AgID states that an Identity Provider may charge renewal fees. For PosteID enabled for SPID, the first year from activation is free and an annual fee of €6, including VAT, applies when that first year ends. Minors, people aged 75 or over, residents abroad and people whose PosteID identity is enabled for professional use are exempt. These terms are specific to PosteID and do not automatically apply to other providers.

Can I have more than one SPID identity?

Yes. One person may hold digital identities from different providers, including identities with different security levels. Each has its own credentials, app, terms and support arrangements, so consider whether an additional identity would genuinely help and protect each set of credentials separately.

What should I do when I change my mobile number?

Update it through your Identity Provider’s online account or published procedure, preferably before losing access to the old number. If you can no longer sign in, use only the provider’s official recovery or support channel. There is no single number-change procedure shared by all SPID providers.

Why am I not receiving an OTP, or why does it fail?

Check that the code has not expired, the phone’s date and time are correct, the provider app can connect to the internet and has notifications enabled, and the registered number is current. Avoid sending repeated requests while a code is still pending. If the issue occurs on several services, contact the provider; if SPID works elsewhere, contact the service you are trying to use.

Can I apply for SPID while outside Italy?

Yes, if you are an adult Italian citizen with the required Italian identity document and tax code. In the official comparison tool, select an online verification method marked for use in Europe or worldwide, and check that the provider accepts your foreign mobile number. Some Italian consular offices also operate as RAO identification offices, but availability must be confirmed.

Is an Italian residence permit enough to obtain SPID?

No. The official SPID activation page states that a residence permit cannot be used on its own to apply. It may help you obtain the Italian identity document required for SPID. You will also need an Italian tax code, a personal email address and a personal mobile number.

Can a minor have SPID?

Yes, through a dedicated process covered by AgID guidelines from age 5. Before age 14, SPID may be used only for online services offered by schools; from 14 to 17, access to other services depends on the required authorisation and on whether the service admits minors. A person with parental responsibility starts the application through their own Identity Provider using level 2 SPID. At 18, the provider blocks access until the holder expressly decides whether to keep or revoke the identity.

Does SPID expire?

The general official sources do not set one universal expiry date for every provider. Contract duration, renewal, password rules, suspension and document updates depend on the Identity Provider’s terms. If the document used for SPID has expired, contact the provider to update the details; do not assume either that SPID expires immediately or that it lasts forever.

Can I use CIE instead of SPID?

You can when the website also displays “Entra con CIE” and you have the required CIE credentials or codes. SPID and CIE are separate identities: having one does not activate the other, and a private service may offer only one of the two login methods.

Who should I contact when login fails?

For registration, passwords, OTPs, the provider app, recovery or suspension, contact your Identity Provider. If the same credentials work on other websites, the problem is likely with the individual service: contact the authority or organisation operating it. Never send a password or OTP to support staff.

Back to contents

Section 19

Official sources

The sources are maintained centrally and were checked on the date shown near the top of this page.

General rules come from SPID and AgID. CERT-AgID supports the security section, while the PosteID provider page and terms support the specific fee example.

Providers, verification methods, prices, support and foreign-number compatibility can change. Reopen the comparison and the provider’s terms before applying or renewing.

Back to contents