What exactly is a PAD (DNIe Update Point)?

A PAD is a self-service kiosk installed inside DNIe issuing offices (police stations). It handles two things: unblocking the PIN and renewing expired certificates. Both require your fingerprint, no appointment, and are free.

Do I need an appointment to unblock the PIN or renew the certificate?

No. The PAD is self-service and needs no appointment. An appointment (via citapreviadnie.es) is only needed if the physical document itself has expired and you need a brand-new card, not for the PIN or the certificates.

What if the physical card has expired too, not just the certificate?

That's a different situation from a blocked PIN or an expired certificate: if the document itself is past its validity date, the PAD isn't enough — you need to book an appointment at citapreviadnie.es to be issued a new DNIe.

Help

Blocked PIN or expired certificate on your DNIe

Q: Why does the DNIe PIN get blocked?

It's a security measure built into the chip: after 3 consecutive wrong PIN attempts, the DNIe blocks itself. It's the same kind of protection a SIM card uses, except the DNIe has no PUK code you can use to reverse it yourself.

Q: Can I unblock the PIN online or by phone?

No, under no circumstances. Since there is no PUK, the only way to set a new PIN is to verify your identity in person with your fingerprint at a DNIe Update Point (PAD). Any service claiming to unblock your DNIe online is not official.

Guide updated: 20 July 2026

The DNIe has no PUK. If the PIN gets blocked after 3 failed attempts, or the certificate has expired (which happens roughly every 2 years, well before the physical card), the only fix is in person: a DNIe Update Point (PAD), with your fingerprint, for free and with no appointment. There is no way to fix it online or by phone.

Why does the DNIe PIN get blocked?

It's a security measure built into the chip itself, the same idea as a SIM card: after 3 consecutive wrong PIN entries, the DNIe locks itself to prevent brute-forcing. The difference from a SIM is that the DNIe has no PUK code you can use to reverse the block yourself from home.

How to unblock a DNIe PIN, step by step

Go to a DNIe issuing office — any police station that offers this service, with your card on you.
Find the DNIe Update Point (PAD) — a self-service kiosk inside the office itself; no appointment, no counter queue.
Identify yourself with your fingerprint and set a new PIN — it's free and takes minutes.

macDNIe detects the blocked state as soon as it reads your card and shows you this same guidance inside the app, with your nearest office at hand.

Can it be unblocked online or by phone?

No, under no circumstances. Since there is no PUK, the only way to set a new PIN is to verify your identity in person with your fingerprint at a PAD. Be wary of any service, app or agency offering to unblock your DNIe online — that procedure does not exist.

What exactly is a PAD?

A DNIe Update Point is a self-service kiosk installed inside DNIe issuing offices (police stations). It does two things: unblock the PIN and renew expired certificates. Both use your fingerprint for identification, need no appointment, and are free.

Expired certificates: the card still works

DNIe certificates expire roughly every 2 years — much sooner than the physical document, which stays valid for several more years. With expired certificates you can still read your data normally, but no e-government site will let you sign in or sign until you renew them.

How to renew DNIe certificates

Exactly the same way as unblocking the PIN: at a PAD in any issuing office, with your fingerprint, for free, no appointment. The kiosk generates fresh certificates on your existing card — you don't need a new card, and there is no online renewal. macDNIe warns you about expiry as soon as it reads your card.

What if the physical card itself has expired?

That's a different case. If the document itself is past its validity date — not just the certificate — the PAD won't help: you need to book an appointment at citapreviadnie.es to be issued a new DNIe.

How macDNIe helps

When it reads your card, macDNIe detects whether the PIN is blocked or the certificates have expired and explains it in plain language instead of a cryptic error, with this same guidance built into the app. macDNIe is an unofficial product by nexoapex: it can't perform the unblock or renewal itself — only the Police at a PAD can — but it saves you from guessing. More on how macDNIe works or how to get it.

Do I need an appointment?

Not for the PIN or the certificates — the PAD is self-service. An appointment at citapreviadnie.es is only needed if the physical card itself has expired and you need a new DNIe.

How much does it cost to unblock the PIN or renew the certificate?

Nothing. Both procedures are free at the PAD.

Can macDNIe unblock the PIN for me?

No — no app can, because the DNIe has no PUK and requires in-person biometric verification at an official PAD. What macDNIe does is detect the problem and tell you exactly what to do and where, instead of a generic error.