Your DNIe and your Mac, finally on speaking terms.
macDNIe reads your card, signs you in to Spain's e-government sites and signs your documents in the standard European formats. In your language, in every browser — and without a single byte leaving your Mac.
Coming soon to the Mac App StoreIn reviewHow it works
macOS 13+ · USB smart-card reader · español, català, euskara, galego
ISO/IEC 7816-4 · CWA 14890 · PKCS#15
» DNIe detected — generation 3.0
» CWA-14890 secure channel established · 9000✓
» signing certificate: valid
» signed (PAdES) · RFC-3161 timestamp ✓
Three gestures
Read. Sign in. Sign.
Everything the DNIe can do, built for the Mac: insert the card and macDNIe takes it from there.
Read
Your card, opened up
Insert your DNIe into the reader and macDNIe connects on its own: it opens the secure channel, checks your certificates and — with your PIN — shows your full identity record and your photograph. It detects your card's generation (1.0 through 4.0) and tells you if anything is out of order.
IDENTITY DATA · PHOTOGRAPH · CERTIFICATES
Sign in
Every portal, every browser
Log in with your DNIe to the Tax Agency, Social Security or the DGT from Safari, Chrome and Edge — native macOS integration via CryptoTokenKit — or from Firefox, with the bundled PKCS#11 module. Portals that require AutoFirma keep working too: macDNIe is interoperable with it.
SAFARI · CHROME · EDGE · FIREFOX · AUTOFIRMA
Sign
Signed documents, no Adobe
Sign PDFs and any other file in PAdES, CAdES or XAdES with the full certificate chain, an RFC-3161 timestamp and — if you want it — a visible signature stamp with your logo on the first, last or every page. Right inside the app.
PAdES · CAdES · XAdES · RFC-3161
How it works
Everything happens on your Mac.
macDNIe talks to your card through the reader, over the secure channel the DNIe itself defines. There is no server in between, no account to create, no "cloud". The same pledge holds for this website: no cookies, no analytics, no third-party resources.
Your PIN
Travels encrypted from your keyboard to the card, inside the secure channel. It is never stored, never logged, never sent anywhere.
Your data
Your identity record and photograph are read from the chip and stay on your screen. Documents you sign are saved wherever you choose.
Telemetry
Zero. No analytics, no device identifiers, no "anonymous usage statistics". Not in the app, not on this site.
Network
The only outbound connections: OCSP (ocsp.dnie.es) to check that a certificate has not been revoked and — only if you enable timestamping — the TSA service. Purchases are processed by Apple. All spelled out in the privacy policy.
And when things go wrong, it still helps: if your PIN is blocked or your certificates have expired, macDNIe doesn't stop at a cryptic error — it tells you exactly what to do and where.
Four co-official languages
In your language, for real.
The interface, the system dialogs and the help guides, natively translated into Spain's four co-official languages. Not as an afterthought — as a principle. (This website is in Spanish and English; the app itself speaks all four.)
Firmar documentoEspañol
Signa el documentCatalà
Sinatu dokumentuaEuskara
Asinar o documentoGalego
Pricing
Pricing you can actually parse.
Two ways to own macDNIe, no strange fine print. Native Apple In-App Purchase: no web checkout, no card numbers in forms.
Annual subscription
€10/year
Every feature, every update. Renews automatically; cancel any time from your App Store settings.
Lifetime license
€150 once
One payment and macDNIe is yours for good, with every feature. No renewals, no surprises.
The annual subscription renews automatically unless you cancel it at least 24 hours before the end of the period; manage it from your App Store settings. "Restore Purchases" is always available in the app. Details in the terms of use.
Frequently asked questions
Worth knowing.
Is this an official app?
No — and we say so on every screen. macDNIe is an independent product by nexoapex. It is not affiliated with or endorsed by the Dirección General de la Policía, the Ministry of the Interior or the Government of Spain.
What does that mean in practice? Your DNIe and its certificates are official — the police issue them — and the signatures you produce follow the European standards (PAdES, CAdES, XAdES), the same ones AutoFirma uses. macDNIe is the tool you use them with on your Mac, the way a PDF reader isn't "from the official gazette" just because it opens it.
My PIN is blocked. What now?
After 3 wrong attempts the DNIe locks itself, and there is no PUK: the only way to set a new PIN is in person. The good news: no appointment needed.
Go to a DNIe issuing office (a police station) with your card.
Use a DNIe update kiosk (PAD — Punto de Actualización del DNIe): they are self-service.
Identify yourself with your fingerprint and set a new PIN. Free of charge.
It cannot be unblocked over the Internet or by phone. macDNIe detects the blocked state and shows you this same guidance inside the app. Official information at dnielectronico.es.
My certificates have expired. Is the card useless now?
The card still works: DNIe certificates expire roughly every 2 years, before the physical document does. With expired certificates you can still read your data, but no portal will let you log in or sign.
Renewing them is free and needs no appointment: at a DNIe update kiosk (PAD) in any issuing office (police station), your fingerprint generates fresh certificates onto the same card. There is no online renewal. macDNIe warns you about expiry when it reads the card. Details at dnielectronico.es. If the physical document itself has expired, book an appointment at citapreviadnie.es.
Will it work with my DNIe? (generations 1.0 to 4.0)
macDNIe works with a contact smart-card reader (USB, CCID class) and detects your DNIe's generation automatically.
DNIe 1.0 and 2.0: contact-only cards — they have no NFC, so a reader is their only interface. macDNIe identifies them and labels them as such.
DNIe 3.0 and 4.0: add NFC on top of the contact chip (the contactless interface used, for instance, by the official MiDNI mobile app). With macDNIe you use them through the reader, like the rest.
What about AutoFirma? And Firefox?
Portals that require AutoFirma keep working: macDNIe is interoperable with it rather than forcibly replacing it.
In Safari, Chrome and Edge, sign-in goes through macOS's native integration (CryptoTokenKit): your DNIe certificate shows up in the browser's own dialog. Firefox doesn't use that integration, so macDNIe ships its own PKCS#11 module — included in the direct-download edition — so you can sign in from Firefox too.
What do I need to get started?
A Mac running macOS 13 or later (Intel or Apple Silicon), a USB contact card reader, your DNIe and its PIN. Nothing else: no Java, no system tweaks, no odd configuration profiles.
Download
Take it to your Mac.
Coming soon to the Mac App StoreIn review
On Firefox? Alongside the App Store edition there will be a direct download (Developer ID signed and notarized) that additionally bundles the PKCS#11 module for Firefox.
In review by Apple · not yet available to download. Want a heads-up when it goes live? Email us.