DNIe for Mac

For macOS · Spanish DNIe reader & signer · unofficial product

Your DNIe on your Mac: read it, sign in and sign documents.

DNIe for Mac reads your card, signs you in to Spain's e-government sites and signs your documents in the standard European formats. In your language, in every browser — and without a single byte leaving your Mac.

Download on the Mac App Store How it works
Questions? Ask in our channel

Reading and signing, free · macOS 13+ · USB smart-card reader · español, català, euskara, galego

  • » DNIe detected — generation 3.0
  • » CWA-14890 secure channel established · 9000 ✓
  • » signing certificate: valid
  • » signed (PAdES) · RFC-3161 timestamp ✓

Three gestures

Read. Sign in. Sign.

Everything the DNIe can do, built for the Mac: insert the card and DNIe for Mac takes it from there.

Read

Your card, opened up

Insert your DNIe into the reader and DNIe for Mac connects on its own: it opens the secure channel, checks your certificates and — with your PIN — shows your full identity record and your photograph. It detects your card's generation (1.0 through 4.0) and tells you if anything is out of order.

IDENTITY DATA · PHOTOGRAPH · CERTIFICATES

Sign in

Every portal, every browser

Log in with your DNIe to the Tax Agency, Social Security or the DGT from Safari, Chrome and Edge — native macOS integration via CryptoTokenKit — or from Firefox, with the PKCS#11 module of the direct-download edition (coming soon). Portals that require AutoFirma keep working too: DNIe for Mac is interoperable with it.

SAFARI · CHROME · EDGE · FIREFOX · AUTOFIRMA

Sign

Sign PDFs with your DNIe, no Adobe

Sign PDFs and any other file in PAdES, CAdES or XAdES with the full certificate chain, an RFC-3161 timestamp and — if you want it — a visible signature stamp with your logo on the first, last or every page. Right inside the app.

PAdES · CAdES · XAdES · RFC-3161

How it works

Everything happens on your Mac.

DNIe for Mac talks to your card through the reader, over the secure channel the DNIe itself defines. There is no server in between, no account to create, no "cloud". This website uses exactly one third-party resource — Google Analytics — and only if you explicitly accept it.

Your PIN
Travels encrypted from your keyboard to the card, inside the secure channel. It is never stored, never logged, never sent anywhere.
Your data
Your identity record and photograph are read from the chip and stay on your screen. Documents you sign are saved wherever you choose.
Telemetry
Zero in the app: no analytics, no identifiers, no "usage statistics". On this site, Google Analytics is optional and only switches on if you accept it.
Network
The only outbound connections: OCSP (ocsp.dnie.es) to check that a certificate has not been revoked and — only if you enable timestamping — the TSA service. Purchases are processed by Apple. All spelled out in the privacy policy.

And when things go wrong, it still helps: if your PIN is blocked or your certificates have expired, DNIe for Mac doesn't stop at a cryptic error — it tells you exactly what to do and where.

Four co-official languages

In your language, for real.

The interface, the system dialogs and the help guides, natively translated into Spain's four co-official languages. Not as an afterthought — as a principle. (This website is in Spanish and English; the app itself speaks all four.)

Pricing

Reading and signing with your DNIe: free, for good.

The essentials cost nothing and never expire: read your card, sign your documents and validate the ones you receive without paying, without an account and without a clock running. Exactly one feature is paid — DNIe Pro, your DNIe inside the browser — and it is optional. Native Apple In-App Purchase: no web checkout, no card numbers in forms.

Free, for good

€0 no account, no expiry

  • Read your personal data and your photo from the chip, protected by your PIN.
  • Sign PDFs (PAdES, with a visible signature and a timestamp), CAdES and XAdES.
  • Validate any signed PDF: integrity, chain of trust, revocation (OCSP) and timestamp.
  • Launcher for e-government portals: Tax Agency, Social Security, Carpeta Ciudadana, DGT, SEPE, Catastro and more.
  • Warnings and step-by-step guidance for a blocked PIN or expired certificates.
  • Demo mode, to try the app with no card and no reader.

DNIe Pro · annual subscription

€9.99/year

Your DNIe inside Safari, Chrome and Edge, to sign in to Spain's e-government sites. Includes a 3-day free trial; renews automatically and you cancel it whenever you like from your App Store settings.

DNIe Pro · lifetime

€149.99 once

The same feature as a single payment: DNIe Pro is unlocked permanently for your Apple account. No renewals.

Reading, signing and validating stay free even if you never buy DNIe Pro — there is no trial period counting down on them. The annual subscription includes a 3-day free trial and renews automatically unless you cancel it at least 24 hours before the end of the period; manage it from your App Store settings. "Restore Purchases" is always available in the app. Details in the terms of use.

Frequently asked questions

Worth knowing.

Is this an official app?

No — and we say so on every screen. DNIe for Mac is an independent product by nexoapex. It is not affiliated with or endorsed by the Dirección General de la Policía, the Ministry of the Interior or the Government of Spain.

What does that mean in practice? Your DNIe and its certificates are official — the police issue them — and the signatures you produce follow the European standards (PAdES, CAdES, XAdES), the same ones AutoFirma uses. DNIe for Mac is the tool you use them with on your Mac, the way a PDF reader isn't "from the official gazette" just because it opens it.

My PIN is blocked. What now?

After 3 wrong attempts the DNIe locks itself, and there is no PUK: the only way to set a new PIN is in person. The good news: no appointment needed.

  1. Go to a DNIe issuing office (a police station) with your card.
  2. Use a DNIe update kiosk (PAD — Punto de Actualización del DNIe): they are self-service.
  3. Identify yourself with your fingerprint and set a new PIN. Free of charge.

It cannot be unblocked over the Internet or by phone. DNIe for Mac detects the blocked state and shows you this same guidance inside the app. Official information at dnielectronico.es. Full guide: blocked or expired PIN.

My certificates have expired. Is the card useless now?

The card still works: DNIe certificates expire every two years, before the physical document does. With expired certificates you can still read your data, but no portal will let you log in or sign.

Renewing them is free and needs no appointment: at a DNIe update kiosk (PAD) in any issuing office (police station), your fingerprint generates fresh certificates onto the same card. There is no online renewal. DNIe for Mac warns you about expiry when it reads the card. Details at dnielectronico.es. If the physical document itself has expired, book an appointment at citapreviadnie.es. Full guide: blocked or expired PIN.

Will it work with my DNIe? (generations 1.0 to 4.0)

DNIe for Mac works with a contact smart-card reader (USB, CCID class) and detects your DNIe's generation automatically.

  • DNIe 1.0 and 2.0: contact-only cards — they have no NFC, so a reader is their only interface. DNIe for Mac identifies them and labels them as such.
  • DNIe 3.0 and 4.0: add NFC on top of the contact chip (the contactless interface used, for instance, by the official MiDNI mobile app). With DNIe for Mac you use them through the reader, like the rest.
What about AutoFirma? And Firefox?

Portals that require AutoFirma keep working: DNIe for Mac is interoperable with it rather than forcibly replacing it.

In Safari, Chrome and Edge, sign-in goes through macOS's native integration (CryptoTokenKit): your DNIe certificate shows up in the browser's own dialog. Firefox doesn't use that integration, so DNIe for Mac ships its own PKCS#11 module — included in the direct-download edition (coming soon) — so you can sign in from Firefox too. Full comparison: AutoFirma on Mac.

What do I need to get started?

A Mac running macOS 13 or later (Intel or Apple Silicon), a USB contact card reader, your DNIe and its PIN. Nothing else: no Java, no system tweaks, no odd configuration profiles.

Any reader that follows the CCID standard will do: macOS recognizes them without installing drivers. Make sure it is a contact reader — with a slot for the chip — not NFC-only, and if your Mac only has USB-C ports, prefer a direct adapter over an unpowered hub.

What is free and what is paid?

Reading your DNIe, signing in PAdES, CAdES and XAdES and validating signed documents are free for good: no account, no expiry, no trial period counting down.

The only paid feature is DNIe Pro, which adds signing in with the DNIe inside Safari, Chrome and Edge: €9.99 a year with a 3-day free trial, or €149.99 once. It is bought through Apple's In-App Purchase; you can check and change the status of your purchases and subscriptions at any time from your App Store settings.

Community

Questions? Ask us in the channel.

We post release notes, compatibility alerts for the Spanish e-government portals, and step-by-step guides. If something does not work, tell us there — we usually reply the same day.

t.me/macDNIe · public channel · no sign-up

Join on Telegram

Download

Take it to your Mac.

Download on the Mac App Store

On Firefox? Alongside the App Store edition there will be a direct download (Developer ID signed and notarized) that additionally bundles the PKCS#11 module for Firefox.

Now available on the Mac App Store, listed there as “DNIe - Firma y autenticación” · free to read, sign and validate · macOS 13 or later and a USB card reader. Questions before you install? Email us.