eIDAS 2.0 and the EUDI Wallet in simple terms

What businesses need to know in 2026

How will businesses identify customers, business partners and employees digitally in the future, exchange credentials and securely conclude contracts? This is precisely where eIDAS 2.0 comes in. The new EU regulation provides the legal framework for a digital identity that can be used across Europe. At the heart of this is the EUDI Wallet, which will open up new possibilities for digital business processes – from identification and the exchange of verified credentials to the integration of electronic signatures.

The eIDAS 2.0 Regulation has been in force since 20 May 2024. The introduction of the EUDI Wallet is being gradually rolled out in 2026 and will have a lasting impact on digital identification and signing processes. For businesses, this does not mean having to immediately overhaul all existing processes. Instead, they should assess at an early stage which digital processes could be affected. This guide explains what has already been established and how eIDAS 2.0 will affect businesses.
eIDAS 2.0
Table of Contents

Key facts at a glance

  • eIDAS 2.0 has been in force since 20 May 2024 and extends the original eIDAS Regulation from 2014.
  • The centrepiece of the reform is the EUDI Wallet. It enables citizens to securely use digital credentials such as driving licences, educational qualifications and proof of age.
  • No central EU database is being created. Identity data remains within national wallet ecosystems and under the users’ control.
  • Use of the wallet remains voluntary for citizens. In certain legally defined circumstances, businesses will be required to accept it as a means of identification.
  • The roll-out of the EUDI Wallet is being gradually launched across Member States in 2026. The specific implementation status varies from country to country.
  • The qualified electronic signature (QES) will be integrated into wallet ecosystems.

What is eIDAS 2.0 and why was the regulation reformed?

The original eIDAS Regulation dates back to 2014 and has been binding across the EU since 2016. It established the first legal framework for electronic signatures and digital identification procedures.
The reform became necessary because digital identification systems had previously been regulated differently across Europe and could only be used across borders to a limited extent. With eIDAS 2.0, the EU aims to create a harmonised framework that makes digital identities and trust services usable across Europe.

The EUDI Wallet: structure, functionality and data protection

The EUDI Wallet (European Digital Identity Wallet) is a digital application that allows users to securely store their identity and various digital credentials and share them selectively when required.
Importantly, this is not a central EU system. Each Member State is developing its own wallet infrastructure, which is interoperable with other systems.

Typical contents of the wallet

  • Identity data (name, date of birth, address)
  • Travel documents and driving licences
  • Educational qualifications
  • Professional certificates
  • Electronic signatures and powers of attorney

Functionality and data protection

The wallet is based on the principle that users remain in control of which information they share. This means businesses only receive the data that is actually required for a particular process.
The principle of data minimisation is applied here: only the information required for the respective purpose is transmitted.
Example: When verifying someone’s age, the system only confirms that the person is of legal age rather than revealing their exact date of birth.

The introduction of the EUDI Wallet: current status in 2026

The entry into force of eIDAS 2.0 does not mean that the wallet must be used immediately. Implementation is taking place gradually through technical standards and national roll-outs.

Technical standards

The European Commission has published so-called implementing acts. They define:
  • technical requirements for the wallet
  • security standards
  • interoperability between Member States
These requirements are based on the Architecture and Reference Framework (ARF), which provides the technical foundation for the European wallet infrastructure.

National implementation

Member States must provide their citizens with an EUDI Wallet once the relevant technical and legal requirements become fully applicable. The roll-out of the EUDI Wallet is being gradually launched across Member States in 2026. However, the specific implementation status varies from country to country, as national wallet solutions are at different stages of development.
Many countries are building on existing systems, such as:
  • Online identification function in Germany
  • ID Austria in Austria

Long-term outlook

As part of the Digital Decade strategy, the EU aims for a large proportion of the population to use a digital identity solution by 2030. Actual adoption will, however, depend heavily on how well the wallet is accepted and used in practice.

For businesses, this means that technical preparations should begin at an early stage, even if mandatory use is introduced gradually.

eIDAS 2.0 and electronic signatures

The developments surrounding eIDAS 2.0 show that electronic signatures will remain a key component of digital business processes.

In future, inSign will also support the EUDI Wallet for both identification and electronic signing. For qualified electronic signatures, inSign works with certified trust service providers. Various identification methods are available, including Video-Ident and Auto-Ident. Please feel free to contact us if you have any questions.

“We have been using the inSign platform for four years as our key tool for lease and tenancy agreements – both for our online business and in our branches. We value its intuitive smartphone interface and the legal certainty it provides in accordance with eIDAS. inSign has helped us to shorten the business cycle and eliminate paperwork without compromising on security.”

What exactly is changing as a result of eIDAS 2.0?

The reform is not limited to the introduction of the wallet. It also expands the overall framework for trust services.

New trust services

In addition to signatures, seals and timestamps, new services are being introduced, including:
  • qualified electronic attribute attestations (QEAA)
  • electronic archiving services
  • remote signing and identity services
The aim is to enable digital business processes to be represented more comprehensively.

Website authentication (QWAC)

The requirements for qualified website certificates are being further developed. The aim is to make organisations more readily identifiable online. However, the specific technical implementation remains the subject of ongoing discussions between EU institutions, security researchers and browser manufacturers.

Interoperability

Digital identities must be recognised across the EU. An identity issued in one Member State can be used in all other Member States. This, in particular, will make cross-border processes significantly easier.

What does eIDAS 2.0 mean for businesses?

The impact depends on the individual business model. The regulation will be particularly relevant for businesses that already verify digital identities, onboard customers or employees, exchange credentials or use electronic signatures. In future, digital identities and verified credentials can be more closely integrated into existing business processes.

What obligations will businesses have?

Use of the wallet remains voluntary for individuals. However, certain regulated organisations will be required to accept the wallet as a means of identification where legally prescribed identification is required.
This applies in particular to:
  • Financial service providers subject to statutory identification requirements
  • Certain large online platforms within the meaning of the Digital Services Act
  • Public authorities conducting digital procedures
  • Other regulated industries, depending on the specific use case
Importantly, this obligation is based on the function being performed rather than applying universally across an entire industry. Affected businesses must provide the necessary interfaces so that users can identify themselves via the wallet.
Organisations can also issue digital credentials themselves, for example universities issuing degree certificates or businesses issuing employee IDs.

Qualified electronic signatures under eIDAS 2.0

The qualified electronic signature (QES) remains the highest legal standard in the EU and continues to have the same legal effect as a handwritten signature. What is new is its closer integration into wallet-based processes.

Two implementation models

  • Wallet-based: The wallet initiates and accompanies the signing process.
  • Provider-based: Identification takes place via the wallet, while the signature is provided by a qualified trust service provider (QTSP).
Both models must meet strict security requirements, including the use of certified signature creation devices.
The legal effect of the qualified electronic signature remains unchanged. The main change is that identification and signing can be more closely linked in the future. Businesses therefore do not need to fundamentally replace their existing signing processes, but they should assess how these processes can interact with new wallet-based processes.

Common misconceptions about the EUDI Wallet

  • “A central EU database is being created.” Identity data remains decentralised within national wallet ecosystems.
  • “The wallet is only relevant to public authorities.” It is explicitly intended for the private sector as well.
  • “Use of the wallet is mandatory.” Use remains voluntary for citizens.
  • “All data is disclosed automatically.” Only the information required for the respective purpose is transmitted.
  • “There is still plenty of time before implementation.” This is only partly true. Implementation is already being rolled out gradually.

What businesses should do now

Businesses should assess at an early stage:
  • which processes require digital identification or authentication
  • whether existing onboarding and KYC processes are already prepared for digital credentials
  • how current signature and trust service providers can be integrated with future wallet standards
  • which national implementations are relevant to their target markets
This will allow existing processes to be gradually aligned with the upcoming European standards, while reducing the risk of having to make major changes later.

Conclusion: eIDAS 2.0 Regulation as a turning point for digital identity in Europe

eIDAS 2.0 marks a fundamental evolution of the European framework for digital identity and trust services.
The EUDI Wallet is creating an interoperable system for digital credentials that extends far beyond the public sector.
The regulation is in force, technical implementation is under way, and the roll-out is taking place gradually across the Member States.
For businesses, eIDAS 2.0 does not mean an immediate and complete overhaul of existing processes. Nevertheless, an early assessment is worthwhile. Organisations that use digital identification, credentials or electronic signatures can now prepare specifically for the upcoming European standards.

FAQ: Frequently asked questions about eIDAS 2.0

eIDAS 2.0 is the revised EU Regulation on electronic identification and trust services. It expands the existing legal framework to include the EUDI Wallet and new trust services.

eIDAS 2.0 introduces stronger security measures and harmonised rules. At its heart is the EUDI Wallet, which is intended to enable citizens to securely and freely manage digital credentials.

eIDAS 2.0 enables new digital identity and credential processes. Businesses should assess which business processes involve identification, authentication or electronic signatures.

The EUDI Wallet is a digital identity solution provided by EU Member States for the secure management and use of digital credentials.

Use remains voluntary for citizens. Certain organisations must accept it in defined circumstances.

No. Businesses do not have to use the wallet in general. However, certain organisations must accept it as a means of identification in legally defined circumstances.

Yes. The legal effect of the qualified electronic signature remains unchanged.

No. There is no central EU database for identity data. Data remains decentralised and under the user’s control.

About the author
Picture of Christina Detling
Christina Detling

As Online Marketing Manager at inSign GmbH, I manage the content, SEO and SEA strategy for Germany's leading electronic signature solution. With a focus on B2B marketing, I drive lead generation and the optimisation of digital customer journeys. My background in Business Informatics (B.Sc.) bridges technical understanding with strategic marketing expertise, a combination I have been putting into practice at inSign since 2019. I use inSign myself and am genuinely convinced by the solution: straightforward, legally compliant and efficient. It is a tool I recommend without hesitation.