Digital certificate, Cl@ve and representative certificate: what each one is
Article 9.2 of Ley 39/2015 (the Common Administrative Procedure Act) accepts two families of methods for identifying yourself to the authorities: qualified electronic certificates issued by providers on the “Lista de confianza” (the official Trusted List of qualified providers) and other systems that require prior registration as a user, such as Cl@ve. The authorities must always accept the certificate, and art. 10.2 applies the same scheme to signatures. In short: the certificate opens every door; Cl@ve opens many, but not all.
- FNMT personal digital certificate (persona física). The FNMT, acting as certification authority, calls it the “certificado de ciudadano” (citizen certificate). It is a qualified digital certificate within the meaning of art. 3 of Regulation (EU) 910/2014 (eIDAS) and carries your name and your DNI, NIE or NIF (tax identification number) (art. 6.1 of Ley 6/2020, the Spanish trust services act). You install it on your computer or phone to identify yourself and sign.
- Representative certificate (certificado de representante). It identifies the person acting on behalf of an entity and includes the details of the company and of that person's powers (art. 6.2 of Ley 6/2020). This is the one your SL needs.
- Cl@ve. The State's common platform for identifying yourself with pre-agreed codes after registering (Orden PRE/1838/2014). It comes in three forms (Cl@ve PIN, Cl@ve Móvil and Cl@ve Permanente) and is for individuals only.
- Certificates from other qualified providers. The FNMT is not the only issuer. A qualified certificate cannot be valid for more than five years (art. 4.2 of Ley 6/2020). Before paying for one, check on the AEAT e-office (sede electrónica) that it is accepted for your procedure.
| Identification method | Who can use it | What procedures it allows | Validity | Cost |
|---|---|---|---|---|
| FNMT personal certificate (persona física) | Adults or emancipated minors with a DNI or NIE (also NIFs starting with L or M) | All your procedures as an individual: 036, 303, 130, 111, renta (personal income tax return), notifications, Social Security, granting powers to your gestor | Up to 4 years; renewable online in the 60 days before expiry | Free |
| Representative certificate for a sole or joint-and-several director (administrador único o solidario) | The sole or joint-and-several director of an SL or SA (sociedad anónima, public limited company), with the appointment registered at the Registro Mercantil (Companies Register) | The company's procedures: 036, 303, 111, 200, the SL's notifications | 2 years | 24 € plus VAT (29.04 €) |
| Representative certificate for a legal entity (persona jurídica) | Joint directors (mancomunados), managing directors (consejeros delegados), attorneys (apoderados) with a special clause, companies acting as director | The same company procedures | 2 years | 14 € plus VAT (16.94 €) |
| Cl@ve PIN and Cl@ve Móvil | Individuals registered with Cl@ve with a DNI or NIE | Your procedures as an individual, except those that require a certificate (an SL's procedures, monthly VAT) | Single-use PIN, valid for 10 minutes | Free |
| Cl@ve Permanente | Registered individuals who activate a password | The same; for high-security (nivel elevado) procedures it asks for an SMS code (requires advanced registration) | Long-lasting password, not unlimited | Free |
| Electronic DNI | Spanish nationals only (art. 4.1 of Real Decreto 255/2025) | Not applicable with an NIE | Not applicable | Not applicable |
| Certificate from another qualified provider | Whoever buys it from the provider | The procedures for which the AEAT or Social Security accept it | Set by the provider, 5 years at most | Set by the provider |
| eIDAS identification (another EU country) | EU citizens with their own country's electronic ID | AEAT e-office, for example the 303 or acting as an attorney | Depends on the country | Depends on the country |
Sources (consulted 26/09/2026): FNMT, FNMT prices, clave.gob.es and AEAT.
What you can and cannot do with each one
If you are an autónomo trading as an individual. You can file your self-assessment returns online with a certificate or with Cl@ve (art. 2.a of Orden HAP/2194/2013); the AEAT e-office also accepts eIDAS, the electronic identification of other EU countries (303 help page, consulted 26/09/2026). The same order only allows paper returns printed from the e-office for a closed list of forms, including the 111, 115 and 130; the modelo 303 (quarterly VAT return) was removed from that list from the 2023 returns onwards, so quarterly VAT is always filed online. See the guides to modelo 130, modelos 111 and 115 and quarterly tax returns for autónomos.
The monthly VAT exception. If you file VAT monthly, for example because you are on the monthly refund register (registro de devolución mensual), the certificate is mandatory and Cl@ve is not accepted (art. 3.1 of Orden HAP/2194/2013).
Tax registration. An individual's modelo 036 (census registration form) can be filed on paper or online, with a certificate or with an access code (art. 12 of Orden EHA/1274/2007). More detail in the guides to modelo 036 box by box and registering as self-employed.
If you have an SL. There is no paper and no Cl@ve: its self-assessment returns and its 036 are filed online with an electronic certificate, either the SL's representative certificate or an attorney's certificate (art. 3.1 of Orden HAP/2194/2013 and art. 12.2 of Orden EHA/1274/2007). The only exception is a 036 used solely to request the provisional or definitive NIF. Legal entities must deal with the authorities electronically (art. 14.2 of Ley 39/2015) and SLs receive AEAT notifications electronically (art. 4 of Real Decreto 1363/2010). A mandatory electronic notification that nobody opens is deemed rejected after ten calendar days (art. 43.2 of Ley 39/2015); we explain this in the guide to replying to a requerimiento (formal demand) from Hacienda. Notifications are read on the AEAT e-office or on the single Enabled Electronic Address, DEHú (Dirección Electrónica Habilitada única).
Social Security. As an autónomo in the RETA (the self-employed Social Security scheme) you must deal with the Treasury through the Sistema RED (the Treasury's electronic document submission channel) or through the electronic services of its e-office (art. 2.2.b of Orden ESS/484/2013). For your own procedures (registration, contributions and payments, adjustment of contributions, employment history) you use the Import@ss portal; the certificate always works, because it must be accepted in every procedure.
How to get the FNMT digital certificate with an NIE, step by step
According to the FNMT e-office (consulted 26/09/2026), the personal certificate is free and can be requested by “any Spanish or foreign citizen, of legal age or an emancipated minor” with a DNI or NIE. With an NIE, the realistic route is identification in person: as a rule, the law requires your identity to be checked face to face (art. 7.1 of Ley 6/2020).
- Gather your documents. EU citizens: the EU registration certificate (certificado de registro) or document showing your NIE plus your passport or home-country identity document, or the official document granting the NIE plus your passport. Everyone else: TIE (foreigner identity card) plus passport, or the official document granting the NIF/NIE plus passport. If you provide any document issued by a foreign body (other than your passport), the FNMT requires a Hague Apostille and, if it is not in Spanish, a sworn translation.
- Set up your computer. Install the “Configurador FNMT-RCM” (Windows, macOS or Linux) on the computer from which you will request and download the certificate.
- Apply online. On the FNMT e-office you enter your NIE, first surname and email address, and choose a password that cannot be recovered if you forget it. You will receive an application code by email.
- Book an appointment and prove your identity. Go in person, with the code and your original documents, to an identity verification office. The FNMT has more than 2,400 and an office finder (identity verification page, consulted 26/09/2026); AEAT and Social Security offices require an appointment (cita previa). Post offices (Correos) cannot be used for this certificate.
- Download the certificate. About an hour after your identity check, download it from the same computer and user account you applied from, with the details typed exactly the same way. Do not format the computer or switch devices in between.
- Make a backup. Export the certificate to a password-protected file and keep it off the computer; you will use it to install the certificate on other devices or on your phone.
A digital certificate without an appointment? With an NIE it is difficult. FNMT video identification (regulated by Orden ETD/465/2021) requires a valid electronic DNI, including via the app (FNMT video identification page, consulted 26/09/2026). If you cannot go yourself, someone else can go for you, but only with your signature on the contract authenticated by a notary (firma legitimada): a notarial power of attorney is not enough.
Validity and how to renew your digital certificate
Validity. The law sets a maximum of five years for a qualified certificate (art. 4.2 of Ley 6/2020). The FNMT issues the citizen certificate with a validity of no more than four years, according to its Certification Practice Statement for citizens (version 2.0 of 11/11/2025, consulted 26/09/2026). The exact date appears in the certificate itself: note it down when you download it.
Online renewal. You can renew it online during the 60 days before it expires, provided it has not been revoked, with the certificate installed in your browser (FNMT renewal page, consulted 26/09/2026). Two limits:
- If it has already expired, it cannot be renewed: you apply for a new one and prove your identity again.
- If you obtained it with another certificate, with an electronic DNI or by video identification, or it was already a renewal, the FNMT requires you to prove your identity again. To renew without appearing in person, the law requires your last in-person identification to be less than five years old (art. 7.6 of Ley 6/2020).
With an NIE, the usual cycle is: certificate obtained at an office, one online renewal and, at the next one, another appointment. Set a reminder two months before expiry.
One certificate per person. The FNMT only allows one personal certificate per citizen: if you request another one from the app, the previous one is revoked (when you renew, the old one remains valid until it expires). A revoked certificate loses its validity from the moment of revocation (art. 28.4 of the eIDAS Regulation).
Cl@ve PIN, Cl@ve Móvil and Cl@ve Permanente: registration and limits
Cl@ve is not installed: you register once and then identify yourself with your phone or a password. Orden PRE/1838/2014 distinguishes an occasional code, “of very limited validity in time”, and a permanent one, “of lasting validity in time but not unlimited”. According to clave.gob.es (consulted 26/09/2026):
- Cl@ve PIN: you enter your NIE and the document detail the gateway asks for, and receive a PIN in the Cl@ve app or by SMS. It is single-use and must be used within 10 minutes.
- Cl@ve Móvil: you confirm access with a QR code or a notification in the Cl@ve app; without the app, it offers you a PIN by SMS.
- Cl@ve Permanente: username (your DNI or NIE) and a password you choose when activating it. For high-security (nivel elevado) procedures it also asks for an SMS code, and to receive it your registration has to be at the advanced level.
How to register with an NIE. According to the Cl@ve registration page (consulted 26/09/2026), there are five methods across two levels; the two based on video identification are, for now, only open to Spanish nationals with a valid DNI, so with an NIE you are left with three:
- Invitation letter (basic level): you request it online with your NIE and the support number (número de soporte) of your document (a code printed on the card or certificate, different from the NIE); it arrives by post at your tax address (domicilio fiscal) on record with the AEAT, with a 16-character code to complete registration, together with a mobile number and an email address. Each mobile number can only be linked to one DNI or NIE; foreign numbers work if they can receive international SMS.
- With an electronic certificate (advanced level): if you already have the FNMT certificate, you register online from anywhere. This is the most convenient option.
- In person (advanced level): at offices of the AEAT, Social Security, the SEPE (public employment service) or the Government delegations, among others. You go in person, without a representative, and many require an appointment.
Limits you should know. Basic registration does not work for every service and does not allow you to use Cl@ve Firma (signing with certificates stored in the cloud). And it is personal and non-transferable: the AEAT considers it improper use for a third party to access with your credentials, “even with your consent” (personal use of Cl@ve, consulted 26/09/2026).
Representative certificate for your SL: which one to request and what documents
An SL cannot use Cl@ve. With your personal certificate you can act for it if the company grants you a power in the AEAT's register of powers of attorney, but the usual and simplest route is a representative certificate, which identifies the company and the person representing it. The provider checks the company's incorporation, the applicant's powers and their registration at the Registro Mercantil (Companies Register), including by consulting the register itself (art. 7.4 of Ley 6/2020). The FNMT offers two types (prices from its price list, consulted 26/09/2026):
- Representative of a sole or joint-and-several director (administrador único o solidario): for an SL or SA whose sole or joint-and-several director has the appointment registered and in force at the Registro Mercantil, with their NIF or NIE correctly recorded in nine characters. It can only be requested online, with your FNMT personal certificate or electronic DNI. It costs 24 € before tax (29.04 € with VAT) and lasts 2 years.
- Representative of a legal entity (persona jurídica): for all other cases (joint directors, or mancomunados, who must sign together; a managing director, or consejero delegado; attorneys with a special clause to obtain it; or a company acting as director of your SL). It costs 14 € before tax (16.94 € with VAT) and lasts 2 years.
Documents for the legal entity certificate. To prove it online (NIF starting with A, B, C or D) you need electronic registry certificates from the Registro Mercantil, verifiable by CSV (secure verification code) and issued within the previous 15 days, covering incorporation and the appointment and validity of the position; if you are an attorney, also the notarial power of attorney with the special clause. Your personal certificate must be an FNMT one, obtained by video identification or at an office and not from an online renewal. In person you can prove your identity at Correos (no appointment), at the AEAT (with an appointment), at the CNMV (securities regulator), at the Navarre regional government (Comunidad Foral de Navarra) or at a career consulate. Payment is by card.
Practical tip. When you set up the SL, check that your NIE is recorded correctly in the registration of your appointment: if it is misspelt, it blocks the director's certificate. The company is bound to electronic notifications from the outset (see tax and accounting obligations of an SL).
If you live outside Spain or are not resident
If you run an SL from another country or have Spanish income without living here, you can identify yourself with your NIE, and the FNMT even issues certificates for NIFs starting with L (Spanish nationals resident abroad, art. 19 of the RGAT, the General Regulation on Tax Management) or M (foreigners without an NIE, art. 20 of the RGAT).
The FNMT certificate from abroad. According to the FNMT's frequently asked questions (consulted 26/09/2026), only the place of identity verification changes: a career consular office (not an honorary consulate) or the Spanish embassy. You apply online, go with the code and your documents, sign the contract there and the consulate sends it to the FNMT. When it has been generated you will receive an email to download it from the same computer you applied from. Check your consulate's website for how to book an appointment.
Cl@ve from abroad. The invitation letter is sent to your tax address on record with the AEAT; if you do not receive post at that address, this route will not work for you. The practical approach is to get the certificate at the consulate first and then register for Cl@ve with it, from any country.
An SL with a non-resident director. The legal entity representative certificate can be verified at consulates, and the sole or joint-and-several director certificate is requested online with your personal certificate. See also the guide for a non-resident director or shareholder of an SL.
Your taxes as a non-resident. The certificate also works for modelo 210 (non-resident income tax return); the full picture is in the guide to non-resident tax in Spain.
Filing taxes without a digital certificate: powers of attorney and colaboración social
The law allows you to act before Hacienda through a representative, “who may be a tax adviser” (art. 46.1 of the Ley General Tributaria, the General Tax Act), and art. 111 of the General Regulation on Tax Management (RGAT) allows representation to be proved, among other ways, by entry in a public register. There are two routes, and in neither of them does your gestor use your credentials:
- AEAT register of powers of attorney (registro de apoderamientos). You grant a power to your gestoría (tax and paperwork advisory firm) or adviser for the procedures you choose: online with your certificate or Cl@ve, at an AEAT office with the official form, or by public deed (AEAT Resolution of 18 May 2010, section two). The power only covers the procedures listed in it; the power to receive notifications also requires the attorney to accept it. It can be revoked at any time. Registered powers last a maximum of five years and can be extended (art. 6.6 of Ley 39/2015); the AEAT allows the extension in the two months before expiry (extension page, consulted 26/09/2026).
- Colaboración social (social collaboration). Gestorías and advisers with a collaboration agreement with the AEAT file their clients' self-assessment returns with their own certificate, with the client's prior authorisation (art. 92.3.e of the Ley General Tributaria and art. 79 of the RGAT).
An SL can also grant a power this way to a person (your gestor or yourself), provided whoever grants the power proves they represent it. What to expect from a professional: what a gestor is and how to work with yours.
Summary. As an individual without a certificate, you still have Cl@ve (except for monthly VAT), the paper form generated on the e-office for forms such as the 130 or 111 (not the 303), an attorney or social collaborator and, if you are not obliged to deal with the authorities electronically, assistance from a civil servant (art. 12.2 of Ley 39/2015). An SL needs its representative certificate or a representative who files on its behalf.
kontora prepares the 303 or the 130 box by box from your bookkeeping and reminds you of deadlines; you file them from the app itself with your digital certificate, by direct filing, or your gestor does so under their power of attorney.
Security: where to keep it and what to do if it expires mid-deadline
Anyone who has your certificate can file returns, read your notifications or grant powers to third parties in your name. Basic rules:
- Install it only on your own devices, protected with a password; never on the gestoría's computer or shared machines, and never send it by email.
- Keep the backup separate from the computer, with a password you do not use anywhere else. For extra protection, the FNMT sells cryptographic cards with a reader.
- Revoke it if you lose control of it (laptop stolen, copy sent to the wrong person): the FNMT has a revocation procedure, including by telephone 24 hours a day if you still have the application code.
- Use Cl@ve only on official websites. The AEAT asks you not to confirm requests, QR codes or notifications coming from a private company's website or app.
If it expires just as a deadline falls due. It can no longer be renewed and getting a new one requires an appointment. Meanwhile, do not let the return go past its deadline: use one of the routes in the previous section (Cl@ve, paper if the form allows it, or your gestor as attorney or social collaborator). If the SL's certificate expires and you are the sole or joint-and-several director, the new one is requested online with your personal certificate and can be downloaded around an hour later.
If you still file late without a prior requerimiento from the AEAT, a late-filing surcharge applies (art. 27 of the Ley General Tributaria). You can estimate it with the late-filing surcharge calculator and see the steps in I have missed a Hacienda deadline.
Typical mistakes foreign autónomos make with the digital certificate
- Letting it expire. Once the 60-day online renewal window has passed, you have to apply for a new one and prove your identity again by appointment.
- Requesting the personal certificate for the SL. The citizen certificate is yours, not the company's: the SL needs the representative certificate, and Cl@ve does not work for it either.
- Staying on Cl@ve basic registration. With an invitation letter you cannot use Cl@ve Firma or receive the Cl@ve Permanente SMS code for high-security procedures. Register with a certificate or in person.
- Trying video identification with an NIE. It currently requires a DNI, both at the FNMT and for Cl@ve. Book an appointment from the start.
- Downloading on a different computer or not making a backup. The download requires the same computer and user account used for the application, and without a backup a breakdown leaves you without a certificate.
- Giving your Cl@ve or your certificate to your gestor. You should not, and it exposes you: use the register of powers of attorney.
- Forgetting when the power expires. Powers of attorney last a maximum of five years; the AEAT points out that those registered before 2 April 2021 that were not extended ceased to have effect on 2 April 2026 (AEAT extension page, consulted 26/09/2026).
- Not checking the SL's notifications. After ten calendar days unopened, the notification is deemed rejected, the step is treated as completed and the procedure continues (art. 41.5 of Ley 39/2015).
Frequently asked questions
Can I get the digital certificate with an NIE?
Can I get the digital certificate without an appointment?
How much does the digital certificate cost?
Can I use Cl@ve for my SL's taxes?
Can I file taxes without a digital certificate?
How do I renew my FNMT digital certificate?
I live outside Spain. How do I get the certificate?
Can my gestor use my certificate or my Cl@ve?
Keep reading
Registering as self-employed in Spain: the two procedures, in order and without fines
How to set up an SL in Spain: the steps, the legal deadlines and what it really costs
What a gestor is, and how to work with yours
Rather have this calculated for you?
kontora generates your tax forms box by box, tells you how much to set aside and reminds you before every deadline.