On 13 October 2026, ABN AMRO, Achmea, ASN Bank, Deloitte, KPN and Rabobank announced MyCheck, an independent digital identity wallet. All six are initiators and investors. A.S.R. and Nationale-Nederlanden have said they want to use it, and the coalition is in talks with more parties.
The app is meant for everything people now do with a pile of accounts and passwords. You log in to different organisations with one app. You prove your age without revealing your name, address or full date of birth. You share approved data once for a contract or an application, and you sign the agreement in the same place. Each time an organisation asks for data, you see what it wants and decide whether to allow it. According to the coalition, MyCheck complies with all European rules.
Why the timing matters
eIDAS 2.0 requires every EU member state to have a digital identity system in place by the end of 2026. The Dutch government is building its own public wallet, which according to the government's own information is not yet available. The coalition has offered to introduce MyCheck together with the government, at no cost to the government or to users. Whether the government takes up that offer is not yet clear.
Law firm Stibbe describes a follow-up system in which commercial providers can offer their own certified wallets. It also notes that from December 2027, banks and other parties that require strong online authentication will have to accept recognised EUDI Wallets. For the banks in the coalition, that date is close.
What sits under the app
From the outside, a wallet is a PIN prompt and a QR code. What users do not see is where the cryptographic keys live and how the person behind them was verified in the first place. Those two questions decide whether a wallet can reach Level of Assurance High, the highest of the three assurance levels in eIDAS.
One common design keeps the keys in the secure hardware of the phone itself. Security then depends on the make, model and software of whatever device someone happens to own, and on the companies that build those devices.
Ubiqu's Remote Secure Element (RSE) takes the keys out of the phone. They stay in secure hardware in a data center, and the user unlocks them with a PIN. The same level of security is available on any smartphone, with no dependency on device hardware. A lost phone is not a lost identity either: the identity can be reactivated on a new device.
Remote Identification covers the first step, establishing who someone is without meeting them. The wallet reads the ID document with the phone and checks that the person holding it is real. Together with KPN, Ubiqu provides both layers for MyCheck, from the RSE to Remote Identification.
“Under eIDAS 2.0, every EU country decides for itself how to deliver digital identity. In MyCheck, banks, insurers and KPN build on one infrastructure. The keys stay in KPN’s secure hardware rather than on the phone, so it works the same on any smartphone.”
– Marc Bongers, Chief Commercial Officer, Ubiqu
Why independence goes all the way down
The coalition presents MyCheck as a Dutch alternative to the wallets of large international technology companies. Our view at Ubiqu is that an independent wallet needs independent security. If the keys sit in hardware controlled by the same platforms MyCheck is meant to be an alternative to, the independence stops at the interface.
KPN Ventures invested in Ubiqu in 2024, and KPN already uses Ubiqu's platform. We mention this for transparency, and because it shows what public-private collaboration looks like when it works: a telecom provider, banks, insurers and a consultancy building on infrastructure from a specialist, instead of each building a wallet alone.
What is still open
The coalition has not announced a launch date. It has not published technical specifications, nor whether MyCheck is certified under eIDAS 2.0, nor how it relates to the public wallet or how long-term operation will be funded. Those answers belong to the coalition.
A wallet earns trust in the moments an app cannot hide: a lost phone, a new device, someone trying to open an identity that is not theirs. The infrastructure has to handle those moments, and that is where our work sits.
