Key Points
- New Aadhaar App enables selective credential sharing without exposing full identity details
- Users can update mobile numbers through app instead of visiting Aadhaar centres
- App supports age verification for DPDP Act compliance without collecting additional data
The Unique Identification Authority of India (UIDAI) has launched a new Aadhaar mobile application that allows users to share specific identity credentials rather than their complete Aadhaar details, marking a shift from paper-based verification to consent-led digital sharing.
The app, available on Android and iOS devices, enables Aadhaar holders to update their registered mobile numbers remotely, a service that previously required a visit to an Aadhaar centre. It also provides biometric lock controls, authentication history access and the ability to manage up to five family profiles on a single device.
UIDAI has described the system as built around selective credential sharing and data minimisation. Under this model, a hotel verifying a guest’s identity or a cinema checking age requirements would receive only the specific information needed for that transaction, rather than a complete copy of the Aadhaar document.
Aadhaar app selective sharing
The selective sharing feature allows users to share specific identity fields through customised QR codes generated by requesting entities. UIDAI said the credentials are digitally signed and that Aadhaar numbers are not stored by verifiers through this process.
A participating verification entity generates a QR code for the required transaction. The Aadhaar holder uses the app to approve sharing of the relevant credential. The underlying mechanism verifies what is necessary rather than exposing everything available on the identity document.
For example, a hotel using an Offline Verification Seeking Entity (OVSE) QR code can verify a guest’s identity without retaining a physical copy of their Aadhaar. The guest scans or interacts with the verification process through the app and authorises only the required information to be shared.
The app’s onboarding process uses the Aadhaar holder’s registered mobile connection and face authentication. After installation, users enter their Aadhaar number, select the relevant SIM, complete face authentication and set a six-digit PIN for subsequent access.
Age verification
MeitY Secretary S Krishnan said the app can support age verification without requiring additional personal information to be shared. This feature has potential applications for social media platforms, online gaming services and e-commerce sites that need to distinguish between age groups.
The age verification capability is relevant to implementation of India’s Digital Personal Data Protection (DPDP) framework, particularly where services require reliable age assurance while minimising personal data collection.
An online service selling an age-restricted product would need to know only whether a customer meets the required age threshold, not their complete Aadhaar details.
Update services
The app enables mobile number updates through the application, though first-time registration of a mobile number still requires a visit to an Aadhaar Seva Kendra or enrolment centre. Address updates can also be initiated through the app with supporting documents submitted digitally. UIDAI said processing of mobile number and address updates can take up to 30 days.
Users cannot update their name, gender, email address or date of birth through the app. Biometric details including photographs, fingerprints and iris information still require a visit to an Aadhaar centre.
The biometric lock feature allows users to control whether their biometric authentication can be used, providing an additional security layer for those who rarely need biometric verification. Users can also view their authentication history to identify transactions or attempts they do not recognise.
UIDAI’s current guidance states that identity data is not shared without the explicit consent of the Aadhaar holder. The app cannot be used when Android developer mode is enabled, a restriction UIDAI said is intended to protect data security.
A proposal to require smartphone manufacturers to pre-install the app on new devices sold in India was not made mandatory. Reuters reported that Apple, Samsung and other industry players opposed the proposal, citing concerns including security, compatibility and manufacturing costs. MeitY decided not to proceed with mandatory pre-installation following consultations with industry stakeholders.
Your Questions, Answered
Can I update my mobile number through the new Aadhaar app?
Yes, registered mobile numbers can be updated through the app. However, first-time mobile number registration still requires a visit to an Aadhaar Seva Kendra. Processing takes up to 30 days.
What is selective sharing in the new Aadhaar app?
Selective sharing allows users to share only specific identity fields required for a transaction through customised QR codes, rather than exposing their complete Aadhaar details.
Can I update my name or date of birth through the Aadhaar app?
No. Name, gender, email address and date of birth updates are not available through the app. Biometric details also require a visit to an Aadhaar centre.
How does age verification work in the new Aadhaar app?
The app can verify whether a user meets an age threshold without sharing additional personal information, useful for services requiring age assurance under the DPDP framework.
