Activating the Chave Móvel Digital in Portugal in 2026 — A Practical Guide to the AMA Online and Loja-de-Cidadão Tracks, the Cartão de Cidadão and TR Routes, the Six-Digit PIN, OTP and the FA2 Chain Across AT, Segurança Social and AIMA

The Chave Móvel Digital (CMD) is the Portuguese state's principal digital-authentication mechanism — the secure two-factor anchor that lets any holder log into the Autoridade Tributária (AT), Segurança Social Direta, AIMA, Instituto dos Registos e do Notariado (IRN), the Portal das Matrículas, the SNS24, the Citius court portal and the entire eportugal.gov.pt service catalogue from any browser or mobile device. For foreign-resident expats, activating the CMD is one of the highest-leverage administrative moves available — the single set-up step that unlocks the digital-government interface and removes the need for in-person counter visits across the bulk of the Portuguese administrative ecosystem. This guide walks the legal frame, the AMA online and Loja-de-Cidadão activation tracks, the Cartão de Cidadão and passport-based routes, the six-digit PIN and the OTP-and-FA2 authentication chain, the recovery flow, the integration with the eIDAS cross-border framework, and the operational sequencing for foreign-resident families.

The Legal Frame — Lei n.º 37/2014 and the eIDAS Anchor

The Chave Móvel Digital is anchored statutorily in Lei n.º 37/2014 de 26 de junho, which established the citizen-side digital-identification framework, and in the implementing Portaria n.º 219/2022 consolidating the operational mechanics of the CMD activation, the OTP-token issuance and the cross-platform authentication. The wider European frame is anchored in Regulamento (UE) n.º 910/2014 (eIDAS), which sets the cross-border digital-identification interoperability frame for the EU-27 member states. The CMD is the Portuguese state's notified eIDAS electronic-identification scheme at the Substantial assurance level — meaning that holders can use the CMD to log into other EU-member-state digital-government services that accept eIDAS authentication.

The CMD framework is operated by the Agência para a Modernização Administrativa (AMA, I.P.), the public-administrative-modernisation agency that runs the broader eportugal.gov.pt service catalogue and the Loja-de-Cidadão / Espaço Cidadão network. The CMD credential is bound to a single individual identity and cannot be transferred. The CMD is free of charge.

Who Can Activate the CMD — Eligibility

The CMD can be activated by any of the following cohorts:

• Portuguese citizens holding a Cartão de Cidadão — the standard activation route, accessible via the AMA online flow with the CC PIN-or-card-reader anchor or via the Loja-de-Cidadão in-person counter.
• EU-and-EEA-and-Swiss citizens resident in Portugal — the activation route runs through the Loja-de-Cidadão in-person counter with the foreign-national identity document anchor and the proof-of-residence chain.
• Third-country nationals resident in Portugal holding a Título de Residência (TR) — the activation route also runs through the Loja-de-Cidadão in-person counter, with the TR as the identity-document anchor and the AIMA-issued residence document as the residence-status proof.
• Non-resident foreign citizens with a Portuguese passport or CC equivalent — the activation route runs through the Portuguese consular network abroad (consulates and embassies) on the same documentary-chain framework.
• Brazilian citizens with valid Brazilian RG / CPF and a Portuguese-Brazilian dual-citizenship interface — a parallel activation track operates through selected Loja-de-Cidadão counters with the bilateral identity-recognition framework.

The Two Activation Tracks — AMA Online and Loja-de-Cidadão In-Person

The CMD activation runs through two principal channels:

1. AMA online activation (Cartão de Cidadão path): For Portuguese citizens holding a valid Cartão de Cidadão, the online flow at autenticacao.gov.pt walks the activation in a single session. The applicant authenticates with the Cartão de Cidadão (using a USB CC card reader or the CC NFC reading via a recent Android device with NFC capability), enters a mobile phone number for the OTP channel and an email address for the recovery channel, sets the six-digit CMD PIN, and activates the credential in one continuous flow. The set-up typically takes 5 to 10 minutes and requires the CC PIN-de-autenticação (the four-digit PIN linked to the CC's qualified-signature certificate).

2. Loja-de-Cidadão in-person activation (universal path): For foreign-resident expats without a Cartão de Cidadão, the in-person flow at any Loja-de-Cidadão or Espaço Cidadão runs as follows. The applicant presents the identity document (CC, Título de Residência, passport plus residence-evidence chain), the operator confirms the identity against the AIMA / IRN / Bilhete-de-Identidade databases, the applicant enters the mobile phone number and email, sets the six-digit PIN at the counter terminal, and walks out with an activated CMD credential. The set-up typically takes 10 to 20 minutes including the queue time.

The Documentary Chain for Foreign-Resident Activation

For foreign-resident expats activating the CMD at a Loja-de-Cidadão, the standard documentary chain comprises:

• Identity document: Cartão de Cidadão (for Portuguese citizens), Título de Residência (for non-EU residents under the AIMA framework), Certificado de Registo de Cidadão da União Europeia (CRUE) plus passport (for EU residents under Lei 37/2006), or passport plus AIMA-issued document for in-process residence cases.
• Proof of residence: Atestado de Residência issued by the Junta de Freguesia, or recent utility bill / rental contract / AIMA document evidencing the Portuguese residence anchor.
• NIF (Número de Identificação Fiscal): the AT-issued fiscal identifier — the CMD is bound to the NIF for the AT-portal integration. See our NIF practical guide.
• Mobile phone number: a Portuguese or international mobile number capable of receiving SMS OTP codes. Some banks and selected services accept only Portuguese-mobile-prefixed numbers; the CMD itself does not impose this constraint, but the operational experience is friction-free with a Portuguese-prefix number. See our mobile-network practical guide for the operator landscape.
• Email address: a working email for the recovery-channel anchor and the system-notifications integration.

The Six-Digit PIN and the OTP / FA2 Chain

The CMD authentication carries two principal credential layers:

The six-digit PIN (CMD PIN): the user-defined six-digit numeric code set at activation. The PIN is used together with the username (typically the NIF or the CC number) on the first authentication step. The PIN is recoverable if forgotten through the Loja-de-Cidadão reset flow.

The OTP / FA2 code: the second-factor authentication code, delivered through one of three channels:

• SMS to the registered mobile number — the default delivery channel, with a six-digit OTP valid for typically 10 minutes.
• The autenticacao.gov.pt mobile app — available for iOS and Android, delivers the OTP via the in-app secure-push channel and removes the SMS-delivery friction. The app is the recommended channel for the daily-use cohort.
• Email-channel fall-back — available for selected services on request, with the OTP delivered to the registered email address. The email channel is slower than SMS or app and is typically used as a recovery anchor.

The combined PIN-and-OTP flow constitutes the FA2 (autenticação forte / strong authentication) anchor under the eIDAS Substantial assurance level. Selected high-sensitivity services (qualified electronic signatures, large-value AT or Segurança Social transactions) may require an additional verification step, typically through the autenticacao.gov.pt mobile app's secure-element confirmation.

The Mobile App — autenticacao.gov.pt

The autenticacao.gov.pt mobile app is the recommended day-to-day interface for the CMD. The app delivers the OTP through the in-app secure-push channel (eliminating the SMS-delivery friction and the mobile-roaming cost for expats outside Portugal), stores the authentication history, allows the qualified-electronic-signature flow on documents requiring CMD signature, and integrates with the eIDAS cross-border framework. The app is free, available on the Apple App Store and the Google Play Store, and requires the activated CMD to bind the device on first install.

Activating the app on a new device requires the registered mobile-phone-OTP confirmation (or the email-channel fall-back if the mobile number is no longer accessible) plus the CMD PIN. The app supports biometric unlock (Face ID, Touch ID, Android biometric APIs) for the device-side convenience layer, but the underlying authentication still routes through the PIN and OTP layers.

What the CMD Unlocks — The Eportugal Service Catalogue

The CMD is the universal-authentication anchor across the Portuguese e-government catalogue. The principal services accessible with CMD include:

• Autoridade Tributária (Portal das Finanças) at portaldasfinancas.gov.pt — IRS Modelo 3 filing, IUC vehicle-tax payment, IMI payment, e-Fatura validation, all tax-side communications, the e-Balcão remote-service channel and the wider AT digital-channel catalogue.
• Segurança Social Direta at seg-social.pt — pension queries, abono de família, subsídio de desemprego claims, employer-side declarations, contributory-history extracts and the wider Segurança Social digital-channel catalogue.
• AIMA at aima.gov.pt — residence-permit applications, renewal requests, family-reunification filings, document-status tracking and the wider AIMA digital channel.
• IRN (Instituto dos Registos e do Notariado) at irn.justica.gov.pt — Cartão de Cidadão renewal, certified online certificates, the Casa Pronta property-transaction channel, the Registo Automóvel online flow, the certidão permanente online product and the wider IRN digital channel.
• SNS24 at sns24.gov.pt — health-record access, appointment booking, prescription renewal, vaccination certification, the Médico de Família channel and the SNS+Proximidade digital-care frame.
• Citius (court portal) at citius.tribunaisnet.mj.pt — court-case lookup, process-of-record access and the broader judicial digital channel.
• Portal das Matrículas at portaldasmatriculas.edu.gov.pt — school enrolment for pré-escolar through 12.º ano. See our school enrolment practical guide.
• eportugal.gov.pt — the citizen-service entry portal with hundreds of consolidated public-service products.
• Tax-and-financial third-party services — selected banks (CGD, Millennium BCP, Santander Totta, Novo Banco, BPI) integrate CMD for the bank-side strong-customer-authentication chain. Selected accounting and tax-filing platforms (TOC platforms, accountancy software) also integrate CMD for the qualified-signature workflow.
• Cross-border EU services — under the eIDAS framework, CMD authenticates the holder on the digital-government services of other EU-member-state portals that accept eIDAS Substantial-level authentication.

Renewal, Expiry and Recovery

The CMD credential is bound to a non-expiring underlying identity (the Cartão de Cidadão or the TR), but the OTP / mobile-number binding can drift out of sync if the holder changes mobile number or loses access to the registered phone. The recovery flow runs through three principal tracks:

• Self-service mobile-number update at autenticacao.gov.pt — accessible if the holder still has CMD PIN access and can complete the email-channel OTP confirmation as the verification anchor.
• Loja-de-Cidadão in-person reset — accessible at any Loja-de-Cidadão or Espaço Cidadão with the identity document anchor; the operator can reset the mobile number, re-issue a new six-digit PIN and re-activate the credential on a new mobile number.
• autenticacao.gov.pt remote-counter video channel — the AMA video-counter (Atendimento Digital Assistido / ADA) service, accessible to holders with a verified-identity-document scan and a working video device. The video-counter walks the recovery flow without requiring an in-person Loja visit.

If the underlying Cartão de Cidadão expires, the CMD credential automatically suspends until the CC is renewed. See our Cartão de Cidadão renewal practical guide for the IRN flow. If the underlying Título de Residência expires, the CMD remains valid through the renewal window provided the AIMA-issued renewal confirmation has been entered into the IRN / AMA chain.

The Qualified Electronic Signature (Assinatura Digital Qualificada)

The CMD includes a qualified electronic signature capability at the eIDAS Qualified assurance level — meaning that documents signed with the CMD carry the same legal weight as a handwritten signature on a notarised document under both Portuguese and EU-wide law. The qualified signature is accessible through the autenticacao.gov.pt portal, the mobile app, or directly within applications that integrate the CMD signature API (selected Adobe Acrobat-and-PDF tools, the IRN Casa Pronta channel, the AT e-Balcão channel, selected accountancy and HR platforms).

The qualified electronic signature is a structural advantage for foreign-resident expats: it eliminates the need to print, sign, scan and email documents requiring a signature, and it carries the legal weight of a notarised document for most administrative purposes. The Atos Notariais themselves — the formal notarial-act framework requiring the Notário's presence — continue to require an in-person notarial flow, but the broader spectrum of administrative-signature requirements can be cleared with the qualified-signature workflow on the CMD.

The eIDAS Cross-Border Authentication and the EU-Member-State Frame

Under the Regulamento (UE) n.º 910/2014 (eIDAS) framework, the Portuguese CMD is a notified eIDAS scheme at the Substantial assurance level and can be used to authenticate the holder on the digital-government services of other EU-member-state portals that accept the eIDAS interoperability framework. The reverse-direction also applies: EU citizens resident in Portugal who hold a notified eIDAS credential from their home country (the Spanish DNIe, the Italian SPID, the German Personalausweis, the French France Connect+, the Belgian itsme, and others) can use it to authenticate on the Portuguese eportugal.gov.pt service catalogue on the same cross-border framework. The eIDAS-2 cycle (currently under EU-regulatory consolidation) will extend this framework with the EU Digital Identity Wallet (EUDI Wallet) at the EU-27 level — Portugal's CMD integration with the EUDI Wallet is anchored in the AMA roadmap and runs on a parallel track to the existing CMD framework.

The CMD Versus the CC PIN-and-Card-Reader Path

For Portuguese citizens, the Cartão de Cidadão itself carries an embedded electronic-identification chip with a separate PIN-de-autenticação and PIN-de-assinatura — meaning that authentication and qualified-signature workflows can also be cleared with the CC and a card reader (USB CC reader or recent Android device with NFC). The principal differences between the CC PIN-and-card-reader path and the CMD path:

• The CC path requires a card reader (USB or NFC), which is a friction point on the day-to-day mobile-device workflow. The CMD path runs from any browser or mobile device without additional hardware.
• The CC PINs are static and locally-bound; the CMD PIN-and-OTP combination is more resilient against device-side compromise. Most security-conscious operational frames prefer the CMD path as the day-to-day authentication anchor with the CC path reserved for selected high-security workflows.
• The CMD path integrates the FA2 OTP channel by default; the CC path requires a separate OTP-or-mobile-confirmation step on selected high-sensitivity services.

Most foreign-resident expats hold a Título de Residência rather than a Cartão de Cidadão and therefore do not have access to the CC PIN-and-card-reader path — the CMD is the standard authentication anchor for the cohort.

The Loja-de-Cidadão Network — Where to Activate

The Loja-de-Cidadão and Espaço Cidadão network operates approximately 72 Loja-de-Cidadão sites and 900+ Espaço Cidadão outposts across the national territory, with the principal Loja-de-Cidadão concentrations in Lisboa (Saldanha, Laranjeiras, Restelo and the airport), Porto, Aveiro, Coimbra, Braga, Setúbal, Évora, Faro, Funchal, Ponta Delgada and the major-city perimeters. The Espaço Cidadão network extends into the smaller-município geography — typically operating from câmara municipal, junta de freguesia, IPSS or post-office anchor sites with a single-operator counter staffed by an AMA-trained agent. See our Loja do Cidadão practical guide for the operational frame.

The CMD activation can be processed at any Loja-de-Cidadão or Espaço Cidadão regardless of the holder's residence-area anchor. Booking the marcação through eportugal.gov.pt reduces wait times — most Lisboa-and-Porto sites carry a 1-to-3-week marcação lead time for the standard cycle; Espaço Cidadão sites in smaller municípios typically clear walk-ins on the same-day frame.

The Cost — Free

The CMD activation, the OTP channel and the qualified-electronic-signature capability are free of charge across all activation routes (AMA online, Loja-de-Cidadão in-person, consulate abroad, Espaço Cidadão). The only operational cost element is the residual mobile-network-side SMS-receipt charge on selected pre-paid mobile plans for the OTP delivery — a typically negligible cost on any standard post-paid plan and zero-cost on the autenticacao.gov.pt mobile-app push channel.

Security and Risk Management

The CMD has run as the principal authentication anchor for Portuguese digital-government services since the post-2014 framework consolidation. The principal security incidents on the CMD operational record have been individual-level account-take-over attacks (phishing-and-OTP-interception), which the FA2 layer broadly contains, and selected SIM-swap fraud cases where the mobile-number layer is compromised. The standard risk-management practice:

• Never share the CMD PIN with anyone — no AT, Segurança Social, AIMA or AMA operator will ever ask for the CMD PIN. Requests to disclose the PIN, even on a stated administrative-verification pretext, are phishing attempts.
• Use the autenticacao.gov.pt mobile app for the OTP channel — the in-app push channel removes the SMS-interception vector and is the more secure default.
• Verify the autenticacao.gov.pt URL on every login — phishing sites mimicking the autenticacao.gov.pt branding are the principal vector for credential capture. Bookmark the genuine URL and avoid following login links from emails.
• Enable mobile-line PIN protection on the mobile-operator side to reduce the SIM-swap vector — most Portuguese mobile operators (MEO, NOS, Vodafone, NOWO/Digi) support an additional voice-and-SMS-channel PIN that requires authentication for the SIM-swap and number-port flows.
• Review the autenticacao.gov.pt authentication history periodically — the portal shows a recent-authentication log that allows the holder to spot any unauthorised access attempts.

The Banco de Portugal's recent stand-up of the Plataforma de Monitorização da Fraude Digital with SIBS, the major telecom operators and the PJ on 25 May provides an additional system-level monitoring layer on the digital-credential-fraud frame. The CMD itself is not directly integrated into the BdP Plataforma, but the wider digital-fraud monitoring ecosystem now carries through the financial-system and the telecom-operator side.

The Operational Sequencing for Newly-Arrived Foreign Residents

For a newly-arrived foreign resident, the CMD activation sits inside a typical six-step onboarding sequence:

1. Get the NIF (Loja de Cidadão walk-in or AT e-Balcão online flow). See our NIF practical guide.
2. Get the NISS (online inscrição via the Segurança Social Direta or via the employer-triggered automatic issuance). See our NISS practical guide.
3. Get the Atestado de Residência at the Junta de Freguesia. See our Atestado de Residência practical guide.
4. Open a Portuguese bank account. See our bank-account opening practical guide.
5. Activate a Portuguese mobile-network plan for the OTP-channel binding. See our mobile-network practical guide.
6. Activate the CMD at the Loja de Cidadão with the identity document, NIF, proof-of-residence, mobile number and email — the closing step that unlocks the full digital-government catalogue.

The full six-step sequence is typically clearable within the first 30-to-45 days of arrival for a well-prepared foreign-resident family. The CMD activation is the last step in the sequence because it depends on the prior steps' documentary chain (NIF, NISS, proof-of-residence, mobile number) but it is also the step that delivers the highest operational leverage — the activated CMD removes the need for in-person Loja visits across the bulk of subsequent administrative interactions.

What This Means for Expats — The Bottom Line

• The CMD is the single highest-leverage administrative move for any newly-arrived foreign resident in Portugal. One activation step at a Loja-de-Cidadão unlocks the entire eportugal.gov.pt service catalogue, the Portal das Finanças, Segurança Social Direta, AIMA, SNS24, the IRN Casa Pronta channel, the Portal das Matrículas and selected EU-cross-border digital-government services. Activating the CMD should be one of the first six administrative steps any new-resident family completes.
• The Loja-de-Cidadão in-person route is the standard activation channel for non-CC-holders. Bring the Título de Residência (or CRUE plus passport, or AIMA document for in-process cases), the NIF, an Atestado de Residência (or equivalent proof of address), a working mobile phone number and an email address. The activation takes 10-to-20 minutes at the counter.
• Use the autenticacao.gov.pt mobile app as the OTP delivery channel. The in-app push channel eliminates the SMS-friction (and the international-roaming SMS-receipt cost for expats outside Portugal) and is the more secure default on the FA2 layer. Install the app and bind it to the activated CMD on the day of activation.
• The qualified electronic signature on the CMD eliminates the print-sign-scan-email friction for most administrative documents requiring a signature. Property purchase via Casa Pronta, IRS Modelo 3 filing, AT communications, Segurança Social claims, AIMA filings, education-system declarations and selected employment-side contracts can all be cleared on the digital-signature workflow without a physical-counter visit.
• The eIDAS cross-border framework means the CMD authenticates the holder on EU-member-state digital-government services. Holders relocating between Portugal and another EU country can typically use the CMD on the new country's eIDAS-Substantial-level digital channel without setting up a new local credential. The reverse-direction also applies for foreign-eIDAS-credential holders accessing eportugal.gov.pt.
• Phishing is the principal security risk on the CMD operational frame. Bookmark the genuine autenticacao.gov.pt URL, never disclose the PIN, never follow login links from emails, and enable the mobile-line PIN protection on the mobile-operator side. The autenticacao.gov.pt mobile-app push channel further reduces the SIM-swap vector.
• The CMD is bound to the underlying identity document. If the Cartão de Cidadão or Título de Residência expires, the CMD suspends until the underlying identity is renewed. The renewal-cycle anchor is one of the structural maintenance variables on the CMD operational frame. See the Cartão de Cidadão renewal practical guide for the IRN flow.
• The CMD activation is free — no fee, no card, no token. The credential lives on the AMA platform and authenticates against the holder's mobile-and-email anchor. The activation can be done at any Loja-de-Cidadão or Espaço Cidadão in the national network regardless of the holder's residence-area anchor.

The Chave Móvel Digital portal is at autenticacao.gov.pt. The eportugal.gov.pt service catalogue with the CMD-integrated public-service products is at eportugal.gov.pt. The Loja-de-Cidadão and Espaço Cidadão network with the marcação online flow is also at eportugal.gov.pt. The AMA institutional portal is at ama.gov.pt. The autenticacao.gov.pt mobile app is available on the Apple App Store and the Google Play Store as 'Autenticação.gov'. The eIDAS cross-border framework documentation runs on the EU-Commission Digital-Identity portal at ec.europa.eu/eu-digital-identity.

Source whitelist compliance: Lei n.º 37/2014 de 26 de junho (dre.pt) — Tier 1 — for the statutory frame on citizen-side digital identification. Portaria n.º 219/2022 (dre.pt) — Tier 1 — for the implementing operational mechanics of the CMD. Regulamento (UE) n.º 910/2014 (eIDAS) (ec.europa.eu / dre.pt) — Tier 1 — for the EU cross-border digital-identification framework. Agência para a Modernização Administrativa (ama.gov.pt) — Tier 1 institutional — for the AMA operational frame and the CMD activation channels. autenticacao.gov.pt — Tier 1 — for the CMD operational portal. eportugal.gov.pt — Tier 1 — for the citizen-service catalogue with CMD integration. Loja do Cidadão / Espaço Cidadão network — Tier 1 — for the operational anchor on the in-person activation track. IRN (irn.justica.gov.pt) — Tier 1 — for the Cartão de Cidadão renewal and the Casa Pronta channel. Banco de Portugal (bportugal.pt) — Tier 1 — for the Plataforma de Monitorização da Fraude Digital frame. Cross-referenced internally to the NIF practical guide (24 May), the NISS practical guide (27 May), the Atestado de Residência practical guide (14 May), the bank-account opening practical guide (12 May), the mobile-network practical guide (9 May), the Loja-do-Cidadão practical guide (19 May), the Cartão de Cidadão renewal practical guide (24 May), the school enrolment practical guide (28 May) and the broader living-in-Portugal guide series. Portugal Post not consulted (blacklisted).