DNIe for Mac

Help

DNIe card readers on a Mac: which ones work

Guide updated: · by David Pelayo (nexoapex)

The DNIe (the Spanish electronic ID card) is a contact card, so reading it on a Mac needs a physical reader. The good news is that macOS ships the driver. Since macOS 10.15, any USB reader that meets the CCID class works with nothing at all to install — and nearly every DNIe reader sold in Spain meets it.

What "Mac compatible" actually means

The box rarely helps: plenty of perfectly good readers mention only Windows, and some that advertise "Mac compatible" add nothing but an installer you do not need. Only one thing really matters — that the reader is CCID (Chip Card Interface Device), the standard USB class for smart-card readers.

Apple documents that macOS includes native support for USB CCID-class readers through CryptoTokenKit, with no additional software. So if the reader is CCID, you plug it in and the system already knows it. A vendor asking you to install a macOS driver is nearly always offering its own utility, not meeting a requirement.

Telling whether a reader is CCID before you buy

There is no need to spend much. A basic contact reader complies exactly as well as an expensive one; the premium usually buys a form factor (built-in, keyboard-integrated) or certifications that home use does not need.

Your Mac doesn't detect the DNIe reader: how to check

Before writing off a reader you already own, check whether the system detects it. With the reader plugged in:

  1. Open System Information (hold ⌥ and choose Apple menu > System Information).
  2. Select USB in the sidebar.
  3. Look for your reader in the device list.

If you prefer the Terminal, system_profiler SPUSBDataType prints the same thing. Appearing there means the Mac can see the hardware. If the reader shows up but no application finds the card, the problem is higher up the stack — and it is almost always the card rather than the reader: see blocked PIN or expired certificate.

Power: the silliest common failure

Desktop readers draw more than you would think. On an unpowered USB-C hub — or a monitor acting as one — a reader can appear and disappear, or never finish initializing. Apple makes the same point about desktop CCID readers connected to an iPhone or iPad. Before concluding the reader is dead, try it in a port on the Mac itself, or on a powered hub.

What about NFC? DNIe 3.0 and 4.0 have it; Macs do not

Recent DNIe versions carry a contactless (NFC) interface, which is what lets a phone read the card by holding it close. On a Mac that is not an alternative: Macs do not expose an NFC reader to applications, so the contact route — card inserted in a reader — is the only one available. Whether your DNIe is 3.0 or 4.0 does not change which reader you need.

DNIeRemote is no way around this either. It is the Police app that turns an Android phone with NFC into a DNIe 3.0 reader, but as of 16 September 2026 its desktop app is published only for Windows and Linux, not for Mac (dnielectronico.es).

The reader works, but it won't read the DNIe

This is the most confusing case, and it is hardly ever the reader's fault. In order of likelihood:

Checking that the DNIe works, not just the reader

Your Mac seeing the reader does not prove the card can sign you in. The Police point to two official services, VALIDe and the FNMT's "Verificar estado" (check status), which tell you whether your certificate is active or revoked (dnielectronico.es).

The FNMT service asks you to identify yourself with the DNIe certificate in the browser, so on a Mac it needs Firefox with the official module or an app that publishes the DNIe into the macOS keychain, such as DNIe Pro, the paid option in DNIe for Mac. If everything is in order, the status shown is "Válido y no revocado" (valid and not revoked), according to Spain's Tax Agency. VALIDe, on the other hand, reads the certificate through AutoFirma or from a certificate file.

Without going through the browser, DNIe for Mac reads the card for free and labels each certificate "Vigente" (valid), "Caducado" (expired) or "Revocado" (revoked); to tell whether a certificate is still valid or has been revoked it queries the OCSP service, so it needs an internet connection. If the certificates have expired or been revoked, or the PIN is blocked, follow the blocked or expired PIN guide.

What to look for, in short

Look for thisWhy
CCID classThe only thing macOS needs — driver included in the system
ISO 7816, contactThe standard the DNIe follows
A connector your Mac hasUSB-A will need an adapter on a modern Mac
A "macOS compatible" labelNeither helps nor hurts — CCID is what decides
A mandatory vendor driverWarning sign: a CCID reader does not need one

Where DNIe for Mac fits

DNIe for Mac talks to the reader through macOS's own smart-card subsystem, so if the system sees the reader, the app does too. It installs no drivers and asks for no special permissions, and when something is wrong it tells you what — card not seated, PIN blocked, certificate expired — rather than a generic error. See how it works or get it for your Mac.

The reader is only the first step. What else you need depending on your browser, and when you need AutoFirma, is covered in the guide to installing the DNIe on a Mac. With the reader ready, you can also sign a PDF with the DNIe or, if you use Firefox without the app, load the DNIe module in Firefox.

Do I need to install a driver for the reader on macOS?

Not with a CCID-class reader. macOS has included the support since 10.15 through CryptoTokenKit, so plugging it in is enough. If the vendor offers a macOS installer, it is nearly always for their own configuration utility, not a requirement for reading the card.

Will any card reader work with the DNIe?

Any contact reader that follows ISO 7816 and is CCID class. Memory-card readers (SD, microSD) are unrelated and will not work, and neither will contactless-only readers, because on a Mac the DNIe is used over contact.

Does a USB-C reader work for the DNIe on a Mac?

Yes, as long as it is a contact reader and CCID class: the connector makes no difference to macOS. A USB-C reader plugs straight into Macs that only have USB-C. A USB-A reader also works with a direct adapter, which is better than going through an unpowered hub, since that can make the reader appear and disappear.

Can I read the DNIe on a Mac over NFC, with no reader?

No. Although DNIe 3.0 and 4.0 have an NFC interface, Macs do not expose an NFC reader to applications. On macOS the only route is a USB contact reader.

Can I use my phone as a DNIe reader on a Mac, with DNIeRemote?

Not with the official app. DNIeRemote, from the Police, turns an Android phone with NFC into a DNIe 3.0 reader connected to the computer, but as of 16 September 2026 its desktop app is published only for Windows and Linux (dnielectronico.es). And Macs have no NFC reader that applications can use, so on macOS the route is a USB contact reader.

The reader appears in System Information but does not work. Is it broken?

Almost certainly not: if it appears under USB, the Mac can see the hardware. Check the card is inserted chip-up and fully home, then rule out a blocked PIN or expired certificates, which is by far the most frequent cause.

How do I know if my DNIe works?

The official route is to check the certificate's status at VALIDe or with the FNMT's "Verificar estado" (check status) service. The FNMT one asks you to identify yourself with the DNIe in the browser, so on a Mac it needs Firefox with the official module or an app that publishes the DNIe into the keychain, such as DNIe Pro. DNIe for Mac shows this for free when it reads the card: it labels each certificate "Vigente" (valid), "Caducado" (expired) or "Revocado" (revoked), and it needs an internet connection to tell whether a certificate is still valid or has been revoked. The certificates expire after two years and are renewed for free at a DNIe Update Point (PAD).