Help

Blocked PIN or expired certificate on your DNIe

Q: Why does the DNIe PIN get blocked?

It's a security measure built into the chip: after 3 consecutive wrong PIN attempts, the DNIe blocks itself. It's the same kind of protection a SIM card uses, except the DNIe has no PUK code you can use to reverse it yourself.

Q: Can I unblock the PIN online or by phone?

No, under no circumstances. Since there is no PUK, the only way to set a new PIN is to verify your identity in person with your fingerprint at a DNIe Update Point (PAD). Any service claiming to unblock your DNIe online is not official.

Q: What exactly is a PAD (DNIe Update Point)?

A PAD is a self-service kiosk installed inside DNIe issuing offices (police stations). It handles two things: unblocking the PIN and renewing expired certificates. Both require your fingerprint, no appointment, and are free.

Q: Do I need an appointment to unblock the PIN or renew the certificate?

No. The PAD is self-service and needs no appointment. An appointment (via citapreviadnie.es) is only needed if the physical document itself has expired and you need a brand-new card, not for the PIN or the certificates.

Q: What if the physical card has expired too, not just the certificate?

That's a different situation from a blocked PIN or an expired certificate: if the document itself is past its validity date, the PAD isn't enough — you need to book an appointment at citapreviadnie.es to be issued a new DNIe.

Guide updated: 28 July 2026 · by David Pelayo (nexoapex)

The DNIe has no PUK. If the PIN gets blocked after 3 failed attempts, or the certificate has expired (which happens every two years, well before the physical card), the only fix is in person: a DNIe Update Point (PAD), with your fingerprint, for free and with no appointment. There is no way to fix it online or by phone.

Why does the DNIe PIN get blocked?

It's a security measure built into the chip itself, the same idea as a SIM card: after 3 consecutive wrong PIN entries, the DNIe locks itself to prevent brute-forcing. The difference from a SIM is that the DNIe has no PUK code you can use to reverse the block yourself from home.

How to unblock a DNIe PIN, step by step

Go to a DNIe issuing office — any police station that offers this service, with your card on you.
Find the DNIe Update Point (PAD) — a self-service kiosk inside the office itself; no appointment, no counter queue.
Identify yourself with your fingerprint and set a new PIN — it's free and takes minutes.

DNIe for Mac detects the blocked state as soon as it reads your card and shows you this same guidance inside the app, with your nearest office at hand.

Can I unblock the PIN online or by phone?

No, under no circumstances. Since there is no PUK, the only way to set a new PIN is to verify your identity in person with your fingerprint at a PAD. Be wary of any service, app or agency offering to unblock your DNIe online — that procedure does not exist.

What exactly is a PAD (DNIe Update Point)?

A DNIe Update Point is a self-service kiosk installed inside DNIe issuing offices (police stations). It does two things: unblock the PIN and renew expired certificates. Both use your fingerprint for identification, need no appointment, and are free.

Where is the nearest PAD? Not every police station issues the DNIe: check the National Police's official list of DNIe issuing offices and pick the closest one. Bring the card — nothing else is needed.

Expired certificates: the card still works

DNIe certificates expire every two years — much sooner than the physical document, which stays valid for several more years. That is not an administrative habit: it is set by article 11.3 of Royal Decree 255/2025, which regulates Spain's national ID — «el plazo de validez de los certificados electrónicos contenidos en el Documento Nacional de Identidad será de dos años». With expired certificates you can still read your data normally, but no e-government site will let you sign in or sign until you renew them.

How to renew DNIe certificates

Exactly the same way as unblocking the PIN: at a PAD in any issuing office, with your fingerprint, for free, no appointment. The kiosk generates fresh certificates on your existing card — you don't need a new card, and there is no online renewal. DNIe for Mac warns you about expiry as soon as it reads your card.

What if the physical card has expired too, not just the certificate?

That's a different case. If the document itself is past its validity date — not just the certificate — the PAD won't help: you need to book an appointment at citapreviadnie.es to be issued a new DNIe.

How DNIe for Mac helps

When it reads your card, DNIe for Mac detects whether the PIN is blocked or the certificates have expired and explains it in plain language instead of a cryptic error, with this same guidance built into the app. DNIe for Mac is an unofficial product by nexoapex: it can't perform the unblock or renewal itself — only the Police at a PAD can — but it saves you from guessing. More on how DNIe for Mac works or how to get it.

Do I need an appointment to unblock the PIN or renew the certificate?

Not for the PIN or the certificates — the PAD is self-service. An appointment at citapreviadnie.es is only needed if the physical card itself has expired and you need a new DNIe.

How much does it cost to unblock the PIN or renew the certificate?

Nothing. Both procedures are free at the PAD.

Can DNIe for Mac unblock the PIN for me?

No — no app can, because the DNIe has no PUK and requires in-person biometric verification at an official PAD. What DNIe for Mac does is detect the problem and tell you exactly what to do and where, instead of a generic error.