How safe are digital ID cards from hackers? – Bundlezy

How safe are digital ID cards from hackers?

A compilation image with a smartphone showing the digital ID mock and distorted lines through it.
Malicious actors could target the digital ID system, but there are ways to mitigate risks (Picture: Shutterstock/Metro)

Let’s be honest – there aren’t that many people who are fans of the new digital IDs, are there?

Since the government announced nearly a month ago the scheme will be rolled out in the future to try and curb illegal migration, it’s faced a huge backlash from people.

The move has been criticised by human rights campaigners, with Big Brother Watch describing them as ‘dystopian’, while some people have vowed to go back to Nokia 3310s if the digital ID is rolled out.

But supporters of the IDs say most of our sensitive information is already online, and we use facial recognition and fingerprints to use contactless payments and verification so it’s really just a step in the next direction.

Here, we break down everything you need to know about digital IDs.

Sign up for all of the latest stories

Start your day informed with Metro’s News Updates newsletter or get Breaking News alerts the moment it happens.

Illustration of how digital ID cards may look (Picture: Tony Blair Institute/Metro)
This is a rough illustration of how digital ID cards may look (Picture: Tony Blair Institute/Metro)

What are digital IDs?

A digital ID is what it says on the tin really – a form of identification that would exist on your phone, in the same way we have contactless payments or the NHS app.

The government said there will be no requirement for individuals to carry their ID or be asked to produce it – but digital ID will be mandatory as a means of proving your Right to Work as it will be ‘the authoritative proof of who someone is and their residency status in this country.’

It will include:

  • name
  • date of birth
  • information on nationality or residency status
  • a photo – as the basis for biometric security – just like an eVisa or Passport, but updated for the modern digital world we live in.

The government said it hopes it will:

  • improve access to public services like education and social benefits – by making it easier for everyone to quickly and easily prove their identity. It will also be available to use to prove your identity when voting in elections
  • reduce identity fraud by minimising personal details you give out and
  • toughen employment checks, including across the gig economy, curbing the prospect of work for illegal migrants
  • streamline verification processes across private sectors too – by enabling digital checks and efficient verification when doing things like opening a bank account or proving your age

Prime Minister Sir Keir Starmer is hoping to roll it out before the next election, but an official date is tbc.

How safe are digital IDs from hackers?

Manos Panaousis, a professor of cybersecurity at the University of Greenwich, told Metro that there is ‘no need to panic’ about the security implications, although the system comes with its ‘vulnerabilities.’

He said: ‘The attacks can target the back end of the infrastructure, which would obviously create big issues.  

‘Or they could look at simpler attacks and steps to target the user directly.’  

One risk could be identity fraud, which is already a risk ‘with any kind of a card, so it should not come as a surprise.’  

Mandatory Credit: Photo by Vuk Valcic/ZUMA Press Wire/Shutterstock (15549943a) Protesters pass through Victoria Embankment during a march against government plans to introduce a digital ID. Protest Against Digital ID, London, England, United Kingdom - 18 Oct 2025
Protesters pass through Victoria Embankment during a march against government plans to introduce a digital ID (Picture: Vuk Valcic/ZUMA Press Wire/Shutterstock)

He said a sophisticated and well-funded criminal entity could try to exploit the system with tactics like ‘deep-fake biometrics spoofing,’ which is ‘very technical, but doable.’  

When asked if hackers were already scheming for a potential attack targeting the digital ID, prof Panaousis said ‘they are always plotting something.’  

He added he would worry more about the ‘backend infrastructure, because all this is using AI and machine learning, and there are a lot of attacks now on the algorithms.’

He continued: ‘If a whole database is attacked by organised crime abroad or terrorists, then it has a huge impact, comparable to losing a database of passwords.  

‘So it is about setting it up properly and not being stingy with the security in the first place.  

‘And secondly, the users need to be educated about the identity card. People must understand that there are risks associated with certain attacks.’  

Prof Panaousis said criminals could try to utilise a window of opportunity when the system is set up and may have ‘some vulnerabilities that are exploited.’

‘Whatever they do, they need to think of cybersecurity by design very, very carefully. It is not a completely brand-new technology, so it is not rocket science to do it properly.’  

To view this video please enable JavaScript, and consider upgrading to a web
browser that
supports HTML5
video

Up Next

Why are people against digital IDs?

The digital ID faces fierce backlash.A petition urging Keir Starmer to scrap it reached more than 1 million signatures within hours after the Prime Minister’s announcement this morning.

But if the digital ID takes off despite the opposition, it could become part of our everyday lives, and there are ways to stay on top of risks.

Prof Panaousis said the ‘most effective mitigation is to build awareness and resilience among citizens themselves – educating people to be cautious about how they share data, how they click on links and how they handle digital interactions.’

The government argued that the new digital ID will offer ‘significant benefits for reducing identity theft and preserving privacy, with security at its core.’

It will have safeguards to limit personal details being shared unnecessarily, and use ‘state-of-the-art encryption and user authentication to ensure data is held and accessed securely.’

If a phone is lost or stolen, the digital ID credentials can be ‘immediately revoked and reissued, providing better security than traditional physical documents,’ the government said.

Prof Panaousis said criminals could try to utilise a window of opportunity when the system is set up (Picture: Getty Images)

Which countries used digital ID?

A number of countries have already rolled them out for things such as voting, verifying ages and accessing government services. Here’s where has them rolled out so far.

Estonia

Estonia’s cutting-edge digital ID scheme has been cited as a model case for how a UK system would work.

As well as allowing citizens to access government services, from tax to applying for nursery places, it is also used for electronic voting in elections.

The ‘smart card’ also helps verify identity for age-restricted websites and online content and even supports digital signatures.

China

The world’s most populous country enforces a compulsory ID scheme for all citizens.

From 2022, the Chinese government announced that a digital version would be introduced.

In July this year, a new system was launched, allowing further surveillance of citizens’ activities.

The new online pass will also be used to verify age on the internet.

India

The world’s largest biometric ID system, Aadhaar, was first launched in India in 2016.

It comprises of a 12-digit identity number which can be voluntarily obtained by all Indian residents.

The scheme has been the subject of several court rulings over privacy.

While the scheme is officially voluntary, but has expanded rapidly as it has become increasingly necessary for certain activities, including receiving benefits.

United States

The US made steps towards introducing a national digital ID with the Digital Identity Act of 2021.

However, several states have already introduced electronic ID schemes, the first being Colorado in 2019.

In 2022, California started piloting a scheme to allow citizens to use digital ID to access certain government services.

Since returning to power, Donald Trump has rolled back several of the Biden era cybersecurity measures, including digital ID provisions.

Singapore

The SingPass service streamlines access to government services through a unique digital ID.

It allows citizens and residents to carry out a range of activities with a single login, such as booking healthcare appointments and banking.

The digital card also serves as a proof of identity within the city state.

Italy

Identity cards are widely used in Italy, although citizens are not legally required to carry them around.

From 2016, physical cards have been phased out and replaced with an electronic version.

United Arab Emirates

In April, the Emirates announced plans to replace physical ID cards with a facial recognition-based digital ID system.

Known as UAE Pass, the new electronic ID is accessed via a dedicated smartphone application and will allow residents to authenticate themselves for a range of transactions and both public and private services

Australia

In Australia, citizens can access a range of private services, from banking to buying alcohol, with their digital identification, reducing the need for multiple separate accounts and pieces of paper.

Get in touch with our news team by emailing us at webnews@metro.co.uk.

For more stories like this, check our news page.

About admin