Blog · October 6, 2026

eID in Norway: BankID, Buypass, MinID and the rules for 2026

Which eID to accept in Norway: BankID and Buypass ID at level high, Commfides, MinID and ID-porten, the AML rule for remote onboarding, Nkom's BankID case, use cases, fallbacks and a launch checklist.

By DiditOctober 6, 2026Updated Oct 6, 2026

In short

For eID in Norway, accept BankID High first: Stø reports 4.7 million users, the EU list (read 5 October 2026) shows BankID notified at High, and on our reading BankID High, not BankID with biometrics alone, meets the Norwegian anti-money laundering rule for remote customers.^{[4][1][19][6]}

Buypass ID is the other Norwegian scheme on that list at High, notified on 24 October 2022.^[1]
MinID and ID-porten serve public bodies and the few private firms acting for the public sector.^[10][15]
Nkom's notice of 24 September 2026 on the "high" level targets six former BankID issuers, not Stø.^[21]

Last reviewed: 5 October 2026 · Not legal advice

This guide to eID in Norway is for businesses verifying customers. Almost every adult has an electronic ID (eID) at the highest level: the Norwegian Digitalisation Agency (Digdir) found 95.78% of residents aged 18+ logged in at level high in the year to 18 January 2025.^[13]

eID in Norway: every scheme at a glance

Businesses rely on market schemes, rated by the Norwegian Communications Authority (Nkom) on the national eID list.^[2][17]

Scheme	Operator	Users	Credential	Assurance and EU status	Data returned	Private-sector access	Didit status
BankID	Stø AS, owned by Norwegian banks^[3]	4.7 million (Stø, 2026)^[4]	One-time code and password, or the app with biometrics^[6]	High (notified 24 October 2022) for BankID High; BankID with biometrics alone is LoA 3, substantial, and not the High means^[1][6]	Name and date of birth; national identity number under conditions^[5]	Yes, through Stø's resellers^[4]	Coming soon
Buypass ID	Buypass AS, owned by Total Specific Solutions since 16 October 2024^[8]	Operator figures only, undated and since changed^[7]	Mobile app, smart card or Buypass ID-Nøkkel^[2]	High, notified 24 October 2022^[1]	Through ID-porten: ID number and level; merchant data not published	Yes, contracted with Buypass^[7]	Coming soon
Commfides eID	Commfides Norge AS^[9]	Not published	Smart card and PIN with a card reader^[9]	High on Nkom's list; not EU-notified^[2][1]	Through ID-porten: ID number and level^[11]	Public services; not for bank login^[9]	On request
MinID	Digdir^[10]	Not published	Password plus SMS code, app or authenticator code^[11]	Substantial on Nkom's list; not EU-notified^[2][1]	National ID number and level^[11]	No: only through ID-porten^[10]	Not EU-notified
ID-porten (gateway)	Digdir^[2]	331 million logins in 2025^[12]	All of the above plus EU eIDs^[11]	A broker, not a scheme; hosts Norway's eIDAS node^[11]	ID number, level, method; no name^[11]	No: public bodies and the few private firms acting for the public sector^[15]	Not EU-notified

The national ID card does not appear on Nkom's list or ID-porten's method list as a login eID.^[2][11] See our BankID Norway integration guide.

eID in Norway: from MinID to a national wallet

2004BankIDBankID launches.
December 2006MinIDFirst version of the public login.
2010ID-portenBuypass and Commfides join MinID.
2012BankID joinsBankID enters ID-porten.
24 October 2022NotifiedBankID and Buypass ID at High.

Norway's eID schemes, 2004 to 2022.^[3][14][1]

BankID på mobil (SIM-based) was switched off on 1 September 2024, according to E24. The ID card in the BankID app, activated with a passport or national ID card, launched in 2024; Stø reports 1.7 million activations by 22 May 2026.^[29] Stø has taken over the formal issuer role and aims, on an undated bankid.no page, for a BankID free of the bank relationship "senest fra våren 2029" (by spring 2029).^[28]

What changes in 2026 and 2027

26 March 2026WarningNkom says BankID could lose "høyt".
24 September 2026NoticeSix former issuers fall short; Stø not covered.
24 December 2026EU walletsEU Member States offer an EUDI Wallet.
24 December 2027EU acceptancePrivate services bound to strong authentication accept wallets.
Spring 2029Bank-freeBankID's target to drop the bank link.

The two December dates are EU deadlines.^{[20][21][30][28]}

Norway is in the European Economic Area (EEA), not the EU. Under eIDAS 2, Regulation (EU) 2024/1183, private relying parties required by law or contract to use strong user authentication for online identification accept the EU Digital Identity (EUDI) Wallet at the user's request by 24 December 2027; micro and small enterprises are exempt.^[30] When it applies in Norway through the EEA Agreement was unconfirmed as of 5 October 2026. Our EUDI Wallet page covers the EU side.

Norway's eID action plan of 22 February 2024 aims for every user group to get an eID at the level it needs.^[27] In 2025 Digdir ran a concept study on a wallet to give everyone a high-level eID, due end of March 2026, and opened a national EUDI Wallet sandbox.^[12] No outcome or launch date is published.

eID in Norway: the law, AML and the regulators

Rule	What it says	Who it affects
LOV-2018-06-15-44	Brings eIDAS into Norwegian law^[16]	eID schemes
FOR-2019-11-21-1578	Defines the levels; Nkom supervises and keeps the list^[17]	Schemes and relying parties
Hvitvaskingsloven (LOV-2018-06-01-23) § 12	Name, ID number and address; extra measures when remote^[18]	AML obliged entities
Hvitvaskingsforskriften (FOR-2018-09-14-1324) § 4-3(4)	An electronic signature at level high on Nkom's list is valid ID remotely^[19]	AML obliged entities
Ekomforskriften	Original ID or an eID such as BankID for a SIM^[24]	Mobile operators

Norway reuses the EU assurance levels, adding an unambiguous tie (entydig knytning) to a birth number (fødselsnummer) or D-number.^[33] The anti-money laundering (AML) act sets the remote baseline.

§ 12(2)Hvitvaskingsloven, LOV-2018-06-01-23

"Dersom bekreftelse av identiteten skal skje uten personlig fremmøte, skal det fremlegges ytterligere dokumentasjon eller gjennomføres ytterligere tiltak."

Source: Lovdata, LOV-2018-06-01-23^[18]

In English: a remote check needs further documentation or measures.^[18]

§ 4-3(4)Hvitvaskingsforskriften, FOR-2018-09-14-1324

"Elektronisk signatur er gyldig legitimasjon for fysisk person når identiteten ikke skal bekreftes ved personlig fremmøte."

Source: Lovdata, FOR-2018-09-14-1324^[19]

In English: an electronic signature is valid ID when identity is not confirmed in person. By cross-reference to selvdeklarasjonsforskriften § 3, it must also meet level high and be on Nkom's list.^[19] That list (22 September 2026) shows BankID per issuer (Stø AS and six others), each "Høyt" (high), like Buypass ID and Commfides eID; MinID is "Betydelig" (substantial).^[2] Our reading: BankID High from Stø, Buypass ID and Commfides qualify; MinID and BankID with biometrics alone (LoA 3) do not.^[6][19] Nkom's case below covers the other six rows.

Nkom's challenge to BankID's high level

On 26 March 2026 Nkom warned that BankID could lose "høyt" because code devices had been handed out without an in-person ID check. Its approved domestic "høyt" eIDs that day were Buypass, Commfides and Stø ("ny BankID løsning").^[20] Stø disputed this on 11 May 2026 and restored in-person pickup of code devices.^[22] On 24 September 2026 Nkom gave notice that six former issuers (Bankenes ID-tjeneste, Danske Bank, DNB, Eika, Nordea and SpareBank 1) did not meet "høyt". Stø, the issuer today, is not covered, users see no consequences, and an inspection of Stø continues.^[21] Digdir says BankID remains a public login option.^[23] The case is about Nkom's domestic "høyt" rows; the EU list still showed BankID notified on 5 October 2026.^[1] No final decision was published as of 5 October 2026.

Regulators and sector rules

Financial supervisor (Finanstilsynet): no eID statement verified; § 4-3(4) binds.^[19]
Gambling: hvitvaskingsforskriften § 4-12 lets the licensed monopoly operators rely on each other's due diligence,^[19] and Norsk Tipping requires BankID and age 18.^[26] No gambling regulator position was found.
Age verification: on 24 April 2026 the government promised a bill this year for a social media age limit from 1 January of the year a user turns 16, with platforms verifying age at login.^[25]

In the EU, the Anti-Money Laundering Regulation (AMLR, Regulation (EU) 2024/1624) applies from 10 July 2027; Article 22(6) requires an identity document or electronic identification means meeting Regulation (EU) No 910/2014 at level substantial or high.^[31] Norway's § 4-3(4) asks for level high today.^[19] The Anti-Money Laundering Authority (AMLA) final draft standards of 30 September 2026, not yet law, keep those two means as the default; alternative methods are for when neither can reasonably be used, and the firm must be able to justify why.^[32]

What the user sees with BankID

Screens 2 and 3 are alternative paths. BankID documents the factors, not a screen order, so app bar labels are placeholders.^[6]

[Your sign-up page]

Choose how to verify

BankID

Use an ID document instead

1On your page the user picks BankID and is redirected.^[6]

[BankID app]

[App shows what you approve]

Approve with face, fingerprint or PIN.

2Path A, BankID with biometrics: the app shows the request; the user confirms with biometrics or PIN. Without biometrics it falls back to screen 3.^[6]

[BankID High]

Code and password

One-time code from the app or code device, then your password.

3Path B: BankID High, without biometrics or on a step-up.^[6]

[Your sign-up page]

You are verified

Full nameShared
Date of birthShared
PortraitNot shared

4With the OIDC profile scope your service receives the signed name and date of birth, no photo.^[5]

The nnin_altsub scope adds the national identity number, but only for customers whose number you already hold.^[5]

Video pending: flow-redirect

A redirect sign-in with a national eID, start to finish.

Choosing schemes by use case

Use case	Rule found	Suggested route in Norway
Fintech and payments	Hvitvaskingsforskriften § 4-3(4)^[19]	BankID High or Buypass ID; document route with extra measures
Crypto services	The same, where the service is an AML obliged entity^[19]	As for fintech
Gambling	Hvitvaskingsforskriften § 4-12; Norsk Tipping asks for BankID and 18+^[19][26]	BankID first; confirm other methods with the regulator
Telecom and prepaid SIM	Ekomforskriften^[24]	BankID or another eID, or an original ID document
Marketplaces and social media	Social media age bill announced, not yet law^[25]	Date of birth from the eID, or a document check
Mobility and car sharing	No eID-specific rule found	eID for identity; a document check for the driving licence

Default

BankID High

4.7 million users (Stø)
Level high, EU-notified
Step up from biometrics

Hvitvaskingsforskriften § 4-3(4)

Second eID

Buypass ID

App, card or key
Level high, EU-notified
Contract with Buypass

Nkom list, "Høyt"

Everyone else

Document check

Passport or ID card chip
Liveness and face match
Extra measures when remote

Hvitvaskingsloven § 12(2)

The three routes in Norway.^{[1][2][4][18][19]}

People without a Norwegian eID

189,814 adults had no high-level eID login in the year to January 2025, and teenagers lag: high-level coverage is 5% at age 14, 38% at 15 and 87% at 16.^[13]

Minors: BankID is open from age 12, and Commfides from 12 with parental consent up to 15.^[28][9]
Foreign residents: D-number holders can get BankID, but need a Norwegian bank until a shared administration system is ready, up to two and a half years by Stø's estimate.^[28]
No birth number or D-number: the AML act asks for date and place of birth, sex and citizenship.^[18]
Cross-border customers: ID-porten takes EU eIDs through its eIDAS node, for public services only.^[11][15]

Country	Scheme on the EU list	Level	Notified
Sweden	Svensk e-legitimation (BankID, Freja eID, EFOS)	Substantial and High	14 December 2020^[1]
Denmark	MitID	Substantial, High	24 October 2022^[1]
Finland	Citizen Certificate (ID card)	High	25 April 2025^[1]

See our guides to Sweden, Denmark and Finland. Everyone else takes the document route (see why the chip read matters).

1Ask where the user lives

The user has BankID or Buypass ID

Yes

Norwegian eID

Level high for AML.

Foreign eID

ID-porten, public services only

AML: document check.

Document check

Chip, liveness, face match.

2Screen and decide

The decision stays with you.

Launch checklist for eID in Norway

Map each flow to its rule: AML, gambling, telecom or age.^[19][24][25]
Require level high where § 4-3(4) applies.^[19]
Step biometric sign-ins up to BankID High.^[6]
Recheck Nkom's list after the final BankID decision.^[2][21]
Agree with your reseller how you collect the ID number.^[5][18]
Build the document route for minors, foreign residents and visitors.
Record the extra measures you apply to remote document checks.^[18]
Follow the EEA status of eIDAS 2 and the AMLR.

How Didit helps with eID verification in Norway

BankID Norway is on Didit's roadmap, as are Vipps and Buypass.

What works in Norway today is the document route: NFC chip reading ($0.15) of the passport or ID card, liveness and face match, with a full KYC check at $0.33 and AML screening at $0.20, in one workflow.

Didit runs five eIDs live today: MitID, BankID Sweden, Finnish Trust Network, Smart-ID and Mobile-ID; EUDI Wallet acceptance is coming soon. Setup is in the digital ID wallets docs.

Didit provides

Document checks with NFC chip reading, liveness and face match
AML screening against sanctions, PEP and watchlists
The evidence of every check

Stays with you

The risk assessment and the AML policies
The extra measures for remote customers
The onboarding decision

Bring BankID to your Norwegian sign-up

Tell us where your users sign in, and start with the document route today.

Talk to us about BankID Norway Start free

Key takeaways

BankID is Norway's main eID: 4.7 million users (Stø), EU-notified at High.
Remote AML onboarding needs level high: BankID High, Buypass ID or Commfides, not BankID with biometrics alone.
MinID and ID-porten serve public bodies and the few private firms acting for the public sector, not businesses in general.
Nkom's notice of 24 September 2026 targets six former BankID issuers, not Stø; a final decision is pending.

Frequently asked questions

Which eID do most people in Norway use?

BankID. Stø reports 4.7 million users in 2026, and 95.78% of adults logged in at level high in the year to 18 January 2025.^[4][13]

Is BankID still at level high after the Nkom case?

Yes for now. The case is about Nkom's domestic "høyt" rows, not the EU list. Nkom's notice of 24 September 2026 covers six former issuers, not Stø, and has no consequences for users. An inspection of Stø continues; no final decision was published as of 5 October 2026.^[21]

Is BankID with biometrics enough for remote AML onboarding?

Not on its own. BankID classes it as LoA 3, substantial, while hvitvaskingsforskriften § 4-3(4) needs an eID at level high. The BankID-with-biometrics flow may step up to BankID High; check the step-up behaviour with your BankID integration.^[6][19]

Can a private company use ID-porten or MinID?

No. ID-porten serves public bodies and the few private firms acting for the public sector, and MinID works only through ID-porten.^[15][10]

Is Buypass ID an alternative to BankID?

Yes. Buypass ID was notified to the EU at High on 24 October 2022 and is "Høyt" on Nkom's list, so on our reading it fits the same AML rule. That is our inference from § 4-3(4), not a regulator statement. Businesses contract with Buypass directly.^[1][2][7]

Can foreigners get a Norwegian eID?

D-number holders can get BankID if they meet the other requirements, but still need a Norwegian bank for now. Others need a document check; home eIDs work only for public services.^[28]

From what age can people in Norway use an eID?

BankID is open from age 12, and Commfides from 12 with parental consent up to 15.^[28][9] Only 5% of 14-year-olds log in at level high, rising to 87% at 16.^[13]

Does Norway have an EUDI Wallet?

Not yet. Digdir ran a concept study on a wallet and opened a national EUDI Wallet sandbox. When eIDAS 2 applies in Norway through the EEA Agreement was not confirmed as of 5 October 2026.^[12]

Will Norway require age checks for social media?

A bill is promised for this year, the government said on 24 April 2026. The limit applies from 1 January of the year a user turns 16, and platforms must verify age at login.^[25]

Sources

Overview of pre-notified and notified eID schemes under eIDAS, European Commission, read 5 October 2026.
Elektronisk identifikasjon (eID), Nkom, page version of 22 September 2026.
About us, BankID.
ID-tjenester, Stø AS.
Scopes and claims, BankID developer documentation.
BankID with biometrics: introduction, BankID developer documentation.
Buypass, Buypass AS.
Change of ownership in Buypass AS, Buypass AS.
Private e-ID, Commfides Norge AS.
MinID, Digitaliseringsdirektoratet.
ID-porten id_token, Digdir documentation.
Årsrapport 2025, Digitaliseringsdirektoratet.
Nøkkeltall fra kunnskapsinnhentingen, Digdir.
Eventyret om ID-porten, Digdir.
Statistikk ID-porten, Digdir.
Lov om elektroniske tillitstjenester, LOV-2018-06-15-44, Lovdata.
Selvdeklarasjonsforskriften, FOR-2019-11-21-1578, Lovdata.
Hvitvaskingsloven, LOV-2018-06-01-23, Lovdata.
Hvitvaskingsforskriften, FOR-2018-09-14-1324, Lovdata.
BankID kan miste godkjenning på høyeste sikkerhetsnivå, Nkom, 26 March 2026.
Varsler vedtak i BankID-saken, Nkom, 24 September 2026.
BankID er tuftet på tillit og sikkerhet, BankID, 11 May 2026.
Oppfølging av avvik: BankID på sikkerhetsnivå høyt, Digdir.
Nye regler skal hindre ID-tyveri, Nkom, 14 January 2025.
Slik blir aldersgrensen for sosiale medier, Government of Norway, 24 April 2026.
Krav for å bli kunde, Norsk Tipping.
Handlingsplan for eID-strategien er klar, Government of Norway, 22 February 2024.
Stø er utsteder av BankID, BankID.
Legitimasjon med BankID i NorgesGruppens butikker, BankID, 22 May 2026.
Regulation (EU) 2024/1183 (eIDAS 2), EUR-Lex, Articles 5a and 5f.
Regulation (EU) 2024/1624 (AMLR), EUR-Lex, Article 22(6).
Final Report, draft RTS under Article 28(1) AMLR, AMLA, 30 September 2026.
Regler og krav for bruk av eID, Digdir, 20 August 2025.

New to the topic: start with what eID verification is, compare the eID schemes by country, and see every scheme on the eID verification page.

One workflow for every Norwegian sign-up

Verify with documents, chip reading and liveness today, and add national eIDs as they arrive.