DigiLocker

DigiLocker
Name	DigiLocker
Developer	National e-Governance Division (NeGD), Ministry of Electronics and Information Technology
Initial release	2015
Latest release	2024
Operating system	Android (operating system), iOS, web
Language	English, Hindi, regional languages
License	Proprietary

DigiLocker

DigiLocker is an Indian digital document wallet and e-signature service designed to provide citizens with secure, access-controlled storage and issuance of digitized documents. Launched as part of a broader national digital identity and digital public infrastructure ecosystem, it integrates with identity, certification, and departmental services to enable issuance, sharing, and verification of documents across public and private organizations.

Overview

DigiLocker functions as a repository for electronic documents, enabling citizens to receive government-issued records and upload digitized personal files. It interconnects with Aadhaar (UIDAI), Income Tax Department (India), Ministry of Home Affairs (India), Central Board of Secondary Education and state-level departments to facilitate direct issuance and verification. The platform supports e-signatures using standards recognized by Controller of Certifying Authorities, and complements initiatives like Aarogya Setu, UMANG, and the National Digital Health Mission by enabling verifiable credentials and interoperability.

History and Development

Conceived under the Digital India programme, DigiLocker's development involved collaboration between the National e-Governance Division and multiple public sector agencies. The project commenced alongside efforts such as Aadhaar (UIDAI) rollout and the launch of BHIM (app) for digital payments, reflecting a push toward paperless services. Early pilots coordinated with the Office of the Registrar General & Census Commissioner, India and state governments led to phased scaling. Legislative and policy milestones, including directives from the Ministry of Electronics and Information Technology and adjudications referencing the Information Technology Act, 2000 and rulings by the Supreme Court of India, shaped adoption and technical standards.

Features and Functionality

DigiLocker provides account creation linked to Aadhaar (UIDAI) or mobile-based authentication, a personal document repository, and integration with issuer repositories for direct transport of certificates. Key functionalities include issuance of e-documents from agencies such as the Central Board of Secondary Education, Municipal Corporations and the Ministry of Road Transport and Highways for digital driving licences and vehicle registration certificates. The platform supports e-signatures compliant with the Information Technology Act, 2000 and uses standards aligning to Public Key Infrastructure overseen by the Controller of Certifying Authorities. APIs allow third-party integrators, including private firms like Tata Consultancy Services, Wipro, and startups, to enable verification workflows. Mobile apps on Android (operating system) and iOS provide QR-code based document sharing and time-bound access controls.

Security and Privacy

Security architecture emphasizes encryption and identity assurance tied to Aadhaar (UIDAI) authentication and two-factor mechanisms, leveraging cryptographic controls promoted by the Indian Computer Emergency Response Team and standards from the Bureau of Indian Standards. The service design incorporates role-based access and audit trails to meet compliance expectations from agencies such as the Reserve Bank of India when used for KYC purposes. Privacy concerns led to policy alignments with the Ministry of Electronics and Information Technology and debates influenced by judgments from the Supreme Court of India regarding biometric databases. Technical safeguards include secure transport, server-side encryption, and integration with the national PKI administered via the Controller of Certifying Authorities.

Adoption and Usage

Adoption grew through partnerships with educational boards like the Central Board of Secondary Education, regulatory bodies like the Securities and Exchange Board of India, and state administrations including the Delhi Government and Maharashtra Government for e-issuance of certificates. Use cases expanded to private sector verification by Indian banks for Know Your Customer processes, insurers, and telecom operators collaborating with platforms such as UMANG and Aarogya Setu. International observers from organizations like the World Bank and United Nations have noted DigiLocker as part of India’s digital public infrastructure stack alongside Aadhaar (UIDAI) and the Unified Payments Interface.

Criticisms and Controversies

Critiques have centered on privacy risks associated with linking to Aadhaar (UIDAI), interoperability limitations with legacy systems in state administrations, and usability barriers for digitally marginalized populations highlighted by NITI Aayog reports and civil society organizations. Security researchers and advocacy groups have pointed to potential attack surfaces around mobile authentication and central repositories, prompting responses from the Ministry of Electronics and Information Technology and advisories by the Indian Computer Emergency Response Team. Debates in legal fora involving the Supreme Court of India and policy discussions within the Parliament of India have influenced ongoing reforms in data protection and digital governance frameworks.

Category:Digital India Category:Government services in India