DigiLocker Explained: How to Use It for ID Verification
Most people in India still carry a folder of photocopies for admissions, bank KYC, or airport check-in, even though the government has offered a free, verified alternative for years. DigiLocker is that alternative, and in 2026 it has quietly become one of the most useful apps on an Indian smartphone. Here is a clear, practical look at what it does and how to actually use it.
What Is DigiLocker
DigiLocker is a cloud-based digital document wallet run by the Ministry of Electronics and Information Technology (MeitY) under the Digital India Corporation. Instead of storing scanned copies of your documents the way a phone gallery does, DigiLocker connects directly to the government departments that issue those documents in the first place. Your Aadhaar comes straight from UIDAI, your PAN from the Income Tax Department, and your driving licence and vehicle registration from your state transport department, each carrying a digital signature from the issuing authority.
This is what makes DigiLocker different from taking a photo of your documents: what sits in your account is not a copy of a document; it is the document, delivered electronically by the body that issued it.
Is DigiLocker Legally Valid
Yes, and this is backed by law rather than convenience alone. Under Rule 9A of the Information Technology (Preservation and Retention of Information by Intermediaries Providing Digital Locker Facilities) Rules, 2016, documents issued and shared through DigiLocker are treated as being at par with the original physical document. This rule was notified under the IT Act, 2000, giving it clear legal backing.
In practice, this means a traffic police officer, an airport security check, a college admission office, or a bank's KYC desk is expected to accept a DigiLocker-issued document exactly as they would accept the paper original. The Reserve Bank of India and the Ministry of Road Transport and Highways have separately issued notifications recognising DigiLocker documents for KYC and as valid ID proof.
What You Can Store in DigiLocker
The range of documents available through DigiLocker has expanded significantly since it launched, and by 2026 it covers most of what an average Indian citizen needs day-to-day:
- Aadhaar card and e-Aadhaar
- PAN card
- Driving licence and vehicle registration certificate (RC)
- Voter ID card
- Class 10 and 12 mark sheets and passing certificates from most state and central boards
- University degree certificates and semester mark sheets, for institutions that have joined the network
- Vehicle insurance policies
- Ration card, in states where it has been integrated
If an institution or department has not yet joined the DigiLocker network, you can still upload a scanned copy under the "Uploaded Documents" section for your own personal storage, though this copy will not carry verified-issuer status.
How to Create a DigiLocker Account
Setting up an account takes a few minutes if your Aadhaar-linked mobile number is active. Here is the process:
- Visit digilocker.gov.in or download the official DigiLocker app from the Play Store or App Store.
- Tap "Sign Up" and enter your full name as per Aadhaar, date of birth, gender, and mobile number.
- Verify your mobile number with the OTP sent to it, then set a six-digit security PIN and add your email ID.
- Enter your 12-digit Aadhaar number and authenticate using the OTP sent to your Aadhaar-linked mobile, or use fingerprint or face authentication if your device supports it.
- Choose a username for future logins. Your dashboard is now ready, and any documents already issued in your name by connected departments will begin appearing automatically.
If the OTP does not arrive, the most common cause is an inactive or outdated mobile number linked to your Aadhaar. This needs to be updated at a UIDAI enrolment centre before you can complete sign-up.
How to Use DigiLocker for ID Verification
Once your account is active, using DigiLocker for verification is mostly a matter of sharing rather than printing. A few common situations:
Bank and financial KYC: Many banks and NBFCs now support pulling your KYC details directly from DigiLocker during account opening, which is part of the shift toward Central KYC (CKYC) 2.0. Instead of submitting photocopies, you authorise the institution to fetch your verified Aadhaar or PAN data with a single consent screen.
Air and rail travel: Indian domestic airports and Indian Railways accept a DigiLocker-linked Aadhaar or driving licence as valid photo ID, so you do not need a printed copy at security or ticket checks.
College admissions and exam registration: Educational institutions and exam bodies increasingly pull mark sheets and certificates directly from DigiLocker, cutting down on manual document verification and the risk of forged certificates.
Traffic and RTO checks: A driving licence and RC shown through the DigiLocker app is accepted as valid under Rule 139 of the Central Motor Vehicles Rules, so a lost or forgotten physical licence is not automatically a problem during a routine check.
| Situation | Accepted via DigiLocker |
|---|---|
| Bank or NBFC KYC | Yes, via CKYC 2.0 document fetch |
| Airport security check | Yes, Aadhaar or driving licence |
| Train ticket ID check | Yes, Aadhaar or driving licence |
| Traffic or RTO stop | Yes, DL and RC under CMV Rules |
| College admission | Yes, for boards on the network |
Recent Updates Worth Knowing
DigiLocker has moved beyond simple document storage in the last couple of years:
Biometric login: Face ID and fingerprint authentication are now available as an alternative to SMS OTP, which also closes off SIM-swap-based fraud that OTP logins were vulnerable to.
CKYC 2.0 integration: Banks and insurers can now pull updated, verified KYC data in real time, which means onboarding with a new financial institution can be near-instant instead of requiring fresh paperwork each time.
Academic Bank of Credits (ABC) and APAAR ID: School and college credits are now automatically linked to a student's Academic Bank of Credits through their APAAR ID, which is tied to DigiLocker. This is designed to reduce manual data entry and fake-certificate risk during exam registrations and admissions.
Is DigiLocker Safe to Use
DigiLocker uses 2048-bit RSA SSL encryption and a consent-based sharing model, meaning no organisation can pull your documents without you actively approving the request on your screen. Every access to your account is logged and visible to you under the Activity section, so you can see exactly which agency accessed which document and when.
That said, basic account hygiene still matters. Keep your DigiLocker PIN separate from other app PINs, enable biometric login if your phone supports it, and avoid approving consent requests from services you do not recognise.
Never Share Your Aadhaar-Linked DigiLocker OTP
This is the single most important safety habit for DigiLocker, and it is worth repeating on its own: never share the OTP sent to your Aadhaar-linked mobile number with anyone, no matter who they claim to be. This OTP is the key that authenticates your entire DigiLocker account and everything inside it, including your Aadhaar, PAN, driving licence, and academic records.
Fraudsters regularly call or message people pretending to be bank officials, DigiLocker support staff, telecom representatives, or even government helpline agents, and ask the person to "read out the OTP for verification." No genuine bank, government department, or DigiLocker representative will ever ask for your OTP over a phone call, SMS, or WhatsApp message. UIDAI, MeitY, and every legitimate financial institution collect OTPs only through their own official app or website, never by asking you to speak or type it out to a caller.
A few habits worth building into daily practice:
- Treat your Aadhaar OTP exactly like your ATM PIN. It is not meant to be spoken aloud, screenshotted, and forwarded, or typed into any link sent by SMS.
- Be suspicious of any urgent call claiming your DigiLocker, Aadhaar, or bank account will be "blocked" unless you share an OTP immediately. This pressure tactic is one of the most common scam patterns in India today.
- Never click on links in unsolicited messages claiming to be from DigiLocker. Always open the official app or type digilocker.gov.in directly into your browser.
- If you accidentally shared an OTP or suspect unauthorised access, immediately change your DigiLocker PIN, review the Activity log for unfamiliar access, and report the incident on the National Cyber Crime Reporting Portal at cybercrime.gov.in or by calling the helpline number 1930.
Because a DigiLocker account holds verified copies of nearly every identity document you own, an OTP leak here is far more damaging than a leaked OTP for a single bank account. A little caution at the moment an unknown caller asks for that code goes a long way toward keeping the rest of your digital identity safe.
Comments
Post a Comment
Have a question or a wellness tip to share? Drop it below — we'd love to hear from you!