How GOV.UK Verify works
GOV.UK Verify works with different organisations, known as identity providers (or certified companies), to prove users’ identities.
The identity providers have met government and industry standards to provide identity assurance services as part of GOV.UK Verify. They work with GOV.UK Verify to ensure users’ data is handled securely, helping your service to meet its data protection obligations.
The identity providers that currently work with GOV.UK Verify are Barclays, CitizenSafe, Digidentity, Experian, Post Office, Royal Mail and SecureIdentity.
How users are verified during the signup journey
When signing in to your service for the first time, users will be asked to set up an account with one of the identity providers.
They’ll ask the user to provide evidence and answer questions about themselves. This will be checked against different records, such as their driving licence, passport, mobile phone contract or credit reference checks.
Proving users’ identities this way means the privacy of their data is protected to a high standard, because:
- their data is not stored in one place
- your service does not know which identity provider they’ve chosen
- the identity provider does not know the user is trying to use your service
After the user has proved their identity, your service will be sent their name, address and date of birth. You will not see any of the other information they sent the identity provider to prove their identity.
The user can use the account they created with an identity provider to:
- sign back in to your service at any time
- sign in to other government services that use GOV.UK Verify