Smart-ID+ is now in Allkiro — what changed and what it means for you

If you have signed something online, logged in or confirmed a transfer in Estonia over the past decade, Smart-ID is probably as familiar to you as your morning coffee. Now that familiar tool has a new and stronger version — Smart-ID+. And we are glad to say that Allkiro supports it today.

But what exactly changed? And do you have to do anything differently? The short answer: security went up, convenience stayed, and one annoying step disappeared altogether. The longer answer is below.

What is Smart-ID+?

Smart-ID+ is the next generation of Smart-ID — the same trusted foundation with a more modern and more robust authentication logic on top. It was built for an era where fraud gets smarter every year, and its purpose is to keep you one step ahead of the fraudsters.

The biggest visible change: no more typing your personal identification code into a web page

This is the most tangible part of the update. Signing in used to start with typing your personal identification code into some web page and hoping that the page really was what it claimed to be. That is exactly the vector phishers exploited.

Smart-ID+ turns the logic around. There is no code to enter anywhere — the login session is bound securely to your Smart-ID app, either by scanning a QR code or directly between apps (app-to-app). The result: a phisher’s fake page comes away empty-handed, because there is nothing left there to trick out of you.

How Smart-ID+ works

In practice this means two clear scenarios:

• Signing in with a QR code (computer to phone). When you sign in on a computer, a dynamic QR code appears on screen. Open the Smart-ID app, scan the code with the camera and confirm with PIN1. The session is bound to your device specifically.
• App-to-app sign-in (on the same phone). When you sign in on a phone, tap the Smart-ID button. The app opens by itself and you confirm the sign-in with PIN1. No personal identification code needed.
• The good old push notification still works. The existing flow is not going anywhere, so nobody is left stranded while getting used to the new way.

The same logic applies when giving a signature, except you confirm it with PIN2 — exactly as before.

What this means for an Allkiro user

Smart-ID+ is already live in Allkiro, so the new, safer sign-in and signing flow is waiting for you the next time you sign a document.

Log in and try Smart-ID+ for yourself. We always welcome feedback at tere@allkiro.ee.