CH-LOGIN - Info

What is CH-LOGIN?

The CH-LOGIN is a login procedure provided by the standard eIAM service of the Federal Administration. The CH-LOGIN account can be used for the various applications of the Federal Administration. This enables the offices to make several login procedures available to internal and/or external users for their specialist applications.

CH-LOGIN is the predecessor of AGOV and will continue to operate alongside AGOV for the time being, but will be phased out gradually. Please refer to the information and FAQ here.


CH-LOGIN - FAQ

How do I obtain a CH-LOGIN? ▼
×

When you access an application (e.g. ) which supports CH-LOGIN as a login procedure, a registration link is presented on the CH-LOGIN login screen.

Are there alternatives to the CH-LOGIN? ▼
×

There are various third party identity providers which can be used as an alternative to the CH-LOGIN (List).

What does CH-LOGIN cost? ▼
×

CH-LOGIN is free of charge.

Which email address should I use for CH-LOGIN? ▼
×

Enter your main email address, i.e. the one you wish to use over the long term. Do NOT save any disposable email addresses. This email address will be transmitted by CH-LOGIN together with your first name and last name to the applications you use. It is also required for the password reset in self-service.

Can I use programmes in CH-LOGIN that automatically fill in the user name and/or password? ▼
×

You can use such "autofill programmes". You must be aware that you are entrusting these programmes with your login factors, the responsibility for this lies with you, only use secure programmes. The CH-LOGIN input mask is compatible with the usual autofill programmes, but these must be used correctly because the user name and password are requested on different CH-LOGIN pages, which is state of the art. In general, the Federal Administration cannot provide support for such autofill programmes and third-party software in general, including operating systems.

Can I have more than one CH-LOGIN? ▼
×

We recommend one CH-LOGIN per individual. This is the only way you can benefit from the convenience of single sign-on across multiple applications. Technically, one CH-LOGIN can be set up per email address.

Should I activate the second login factor (mTAN transmission via SMS oder Authenticator App) in CH-LOGIN? ▼
×

We recommend registering a mobile phone number and/or an Authenticator App in CH-LOGIN so that the second login factor can be sent. Firstly, this increases security for you and, secondly, there are applications for which the second login factor is mandatory.

If higher-value secondary login factors such as the Mobile ID and FIDO tokens are required for your use cases, you will be informed of this directly by the Federal Administration.

What are the security questions in CH-LOGIN for? ▼
×

If you change mobile phone number, you can register your new number in CH-LOGIN by correctly answering the security questions.

What are good answers to the security questions? ▼
×

Choose answers you will remember in a few years' time and which others cannot guess.

Can the same CH-LOGIN be used by several individuals? ▼
×

A CH-LOGIN always represents exactly one natural person, regardless of whether this person uses the CH-LOGIN for themselves or on behalf of an entity, for example. This natural person is responsible for the correct use of the CH-LOGIN, the applications that can be accessed with it and the transactions carried out using this authentication. This means that this person is also responsible for the safekeeping and correct use of the associated credentials* (e.g. passwords). If this person transfers their CH-LOGIN to one or more other persons for use, the first person discloses/transfers the credentials. There is no legal basis that prohibits this procedure for the CH-LOGIN. This is subject to regulations in connection with target applications that are supplied with it and transactions that are carried out with it.
* This website uses the English technical term Credentials instead of the numerous German, French and Italian terms with the same or very similar meaning. We thereby simplify the discussion by using a single word for this central term consistently in all languages.
The specification - Si001 - IKT-Grundschutz in der Bundesverwaltung - uses the term Authentifikations- und Identitätsnachweismittel (authentication and identity proofing means). In the English-speaking world and in technical jargon, the term Credentials is used almost congruently. In German-speaking countries, the term Berechtigungsnachweis is more widespread than the newer and more precise term Authentifikations- und Identitätsnachweismittel. Credentials are, for example, passwords, official ID cards, photos, biometric features.

Where can I find instructions and support contacts for CH-LOGIN? ▼
×

The information can be found on CH-LOGIN Help