FED-LOGIN Setting up «totally smartcardless» - Setup

If you have already set up your FED-LOGIN as «totally smartcardless» and have at least one working login method (FED-LOGIN Access App or security key), you can manage your login methods at any time via the eIAM MyAccount self-service portal. In this case, you do not need to follow the setup process described below.

FED-LOGIN «totally smartcardless» is the right solution for you if:
×

  • You are an internal or external employee of the Federal Administration,
  • you currently do not have a Federal Administration smartcard and will not receive one in the foreseeable future, and
  • at least one of the following points applies to you:
    • You require a login method for your FED-LOGIN to access Federal Administration applications with increased login quality requirements (for example, GEVER), or
    • You require a login method for your FED-LOGIN to access Federal Administration applications from outside the Federal Administration networks, or
    • You require a login method for your FED-LOGIN to access Federal Administration applications with your mobile device (smartphone/tablet).


Image Set up FED-LOGIN «totally smartcardless»
FED-LOGIN «totally smartcardless» - onboarding / setup (AI image)


Proceed as follows to set it up:

To ensure that only you have access to your FED-LOGIN account, we verify your identity using a verified AGOV account. A verified AGOV account means that the account holder’s identity and personal details have been verified using an official photo ID (passport or identity card).

If you already have a verified AGOV account, proceed directly to step 2 of the instructions.

  1. Create an AGOV account and confirm your identity
    • If you do not yet have an AGOV account, create one at:
      Start AGOV account registration directly. The email address used for the AGOV account does not have to match the email address of your FED-LOGIN account.

    • Then, complete the identity verification according to the following instructions:
      Verified AGOV login with optional entry of the AHV number We also recommend entering your AHV number and having it verified. This step is optional. Please also note the information under point 3c.

    • Do not continue until you have received confirmation that the identity verification has been completed successfully.

  2. Start onboarding with a verified AGOV account
    In your web browser, access the «FED-LOGIN Onboarding & Recovery» service at .

    If you work in non-productive operating environments, please note the following:
    ×

    • AGOV: You can use the same verified AGOV login across all operating environments.

    • FED-LOGIN: However, separate, independent FED-LOGIN accounts exist for the non-productive operating environments «Acceptance» and «Reference». To manage your FED-LOGIN accounts in these operating environments, please use the following «FED-LOGIN Onboarding & Recovery» service links:
      • Acceptance:
      • Reference:

  3. Log in with AGOV
    1. Log in with your verified AGOV account.

      If you are using your verified AGOV account for eIAM for the first time, you may be asked whether you already have a CH-LOGIN and wish to replace it with your AGOV account.

      If you already have a CH-LOGIN, follow the displayed process for switching from CH-LOGIN to AGOV.

    2. Specify FED-LOGIN account
      Enter the email address of your FED-LOGIN account.

    3. Confirm FED-LOGIN account
      Follow the displayed steps to confirm that the specified FED-LOGIN account belongs to you.
      Which account data is cross-referenced?
      ×

      Your verified personal data from AGOV will be compared with your personal data stored in the Federal Administration.
      • If an AHV number is stored both in AGOV and in the personnel system of the Federal Administration, the check is carried out via date of birth and AHV number.
      • If the AHV number is not stored either in AGOV or in the personnel system of the Federal Administration, the check is carried out via date of birth, first name(s), and last name.
      In the event of an insufficient match, an error message will be displayed and an email containing information about the test result will be sent to your FED-LOGIN email address. Read the help article about this: Error identifying your FED-LOGIN account

      Upon successful verification, you will be forwarded to the Self-Service Portal «eIAM MyAccount».

  4. Register login method in eIAM MyAccount
    In eIAM MyAccount, open the «Login & Security» tab.

    There you can register one or more of the following login methods:

    You want to register the FED-LOGIN Access App ▼
    ×

    1. Go to the Login & Security tab. In the FED-LOGIN Access App tile, click Register.


    2. Using the device on which you want to install the FED-LOGIN Access App, scan the displayed QR code corresponding to your operating system. Or download the Access App via the appropriate Apple & Google App Store.

      When the installation of the app on your mobile device is complete, click Next.


    3. Open the FED-LOGIN app on your mobile device. Press scan QR code in the app. If asked by your device's operating system whether you allow the app to access the camera, you must allow it. Move your device's camera over the QR code.

      You will now be prompted in the FED-LOGIN Access App to choose an authentication method. This authentication method protects the app from being used by unauthorized persons. It ensures that only you as the authorized owner of this device can use the app for logins.

      Select the desired authentication method on your mobile device:

      • PIN authentication - Set a PIN (this PIN is independent of your device PIN).
      • Face ID / Touch ID - This biometric-based method is recommended as it is convenient and secure at the same time. If it cannot be used later during a login, the app will request the entry of the device PIN.

      Once the authentication method has been set up, a confirmation message appears.


    4. To finish, click Back to Login & Security.


    5. Your FED-LOGIN Access App is now registered.


    Important note:
    If you no longer have a login factor for your FED-Login account, e.g., due to loss or defect, you will lose all FED-LOGIN access and will have to go through the complex FED-LOGIN «totally smartcardless» Recovery process. Avoid this situation by additionally registering one or more mobile devices with the AGOV access App or another security key (FIDO2) in your FED-Login account via the eIAM Myaccount Self-Service Portal.

    If the action is not possible (function disabled), you are currently not signed in to MyAccount using strong authentication. In this case, MyAccount will notify you with a banner (only when MyAccount is used from the Federal Administration networks). Use the «Strong authentication» function to sign in to MyAccount with the authentication quality required to manage login methods.

    You want to register a security key (FIDO2) ▼
    ×


    1. Navigate to the Login & Security tab. In the Security key tile, click Register
      Screenshot showing the selection of a security key registration in MyAccount.
      Selecting a security key registration.


    2. Give the security key you want to register a name (for later key management) and click Next.
      Input screen for naming the FIDO security key.
      Enter a name for the FIDO security key.


    3. Read the information about the Windows Hello security key, and click Start to begin the registration.
      Brief instructions for the registration steps for the FIDO security key and information about Windows Hello.
      Brief instructions and information.


    4. Select the type of security key, click Next, and follow the remaining prompts until registration is complete.
      Display to select the type of security key.
      Select security key.


    5. Your security key is now registered.
      Display of the successful registration of the FIDO security key.
      Successful registration of the FIDO security key.


    Important note:
    If you no longer have a login factor for your FED-Login account, e.g., due to loss or defect, you will lose all FED-LOGIN access and will have to go through the complex FED-LOGIN «totally smartcardless» Recovery process. Avoid this situation by additionally registering one or more mobile devices with the AGOV access App or another security key (FIDO2) in your FED-Login account via the eIAM Myaccount Self-Service Portal.

    If the action is not possible (function disabled), you are currently not signed in to MyAccount using strong authentication. In this case, MyAccount will notify you with a banner (only when MyAccount is used from the Federal Administration networks). Use the «Strong authentication» function to sign in to MyAccount with the authentication quality required to manage login methods.



    We recommend registering at least two FED-LOGIN login methods. This ensures that you can still access your FED-LOGIN account if a device is lost or stops working.


  5. After successful registration, you can use the new login method for FED-LOGIN.
    This allows you in particular to:
    • access applications with higher security requirements
    • log in using smartphones and tablets
    • sign in with your FED-LOGIN identity without a smartcard on computers outside the Federal Administration networks (provided the application is accessible via the Internet)


Note on session duration:
For security reasons, your session in eIAM MyAccount will end automatically after a prolonged period of inactivity. In this case, restart the process by calling up the «FED-LOGIN Onboarding & Recovery» service (step 2) again via the following address: .