Certificado Digital and Cl@ve PIN for foreign property owners in Spain: the 2026 guide

Every foreign property owner in Spain eventually hits the same wall. They try to file a Modelo 210 non-resident tax return, or check what the Ayuntamiento has billed them for basura, or download a padrón certificate, or reply to a notificación electrónica from Hacienda, and the website answers with a login screen offering three options: Cl@ve PIN, Cl@ve Permanente, or Certificado digital. None of the three is obvious. All of them work differently. Two of them assume you live in Spain. The one that does not assume that has installation quirks that reliably break on a Mac, in Safari, and inside every corporate laptop that has been touched by an IT department.

This is the article on which of those three you actually need as a non-resident owner, how to get it from outside Spain without flying over for a single-signature appointment, why your browser silently refuses to talk to the tax office when you finally have it, and what the ongoing renewals and revocations look like once you are set up. It is the piece we wish somebody had handed us the first time we tried to pay the IBI online at 11pm on a Sunday.

The three logins and what they actually are

Spain does not have one single citizen login. It has, in effect, three, and they are administered by two different agencies, work over completely different rails, and are recognised unevenly by different public bodies.

System	Issued by	Physical medium	Best for	Realistic for non-residents?
Cl@ve PIN	Agencia Tributaria (AEAT) + Seguridad Social	SMS to a Spanish mobile number	One-off logins to Hacienda, DGT, Sede Social	Only if you have a Spanish SIM
Cl@ve Permanente	Same, but with an issued password	Password + SMS second factor	Frequent Hacienda / SS logins	Same limitation — Spanish SIM required
Certificado digital (FNMT-RCM)	Real Casa de la Moneda	A file installed in your browser or on a smart card	Everything, everywhere, forever	Yes — this is the non-resident option

The bottom row is the one that matters for foreign owners. Cl@ve, in both its PIN and Permanente flavours, is tied to a Spanish mobile phone number that receives an SMS second factor. Officially you can register a foreign number; in practice the enrolment flow refuses many foreign carriers, the SMS never arrives on some, and you cannot swap the number remotely once registered. Every foreign owner we know who tried to make Cl@ve their primary login eventually abandoned it. The FNMT digital certificate is fiddlier to install once but has none of those problems: it is a cryptographic file on your machine, not an SMS to your phone, and it works from anywhere in the world once you have it.

If you take one sentence from this article: get the FNMT digital certificate first, and treat Cl@ve as a nice-to-have you might add later once you have a Spanish SIM.

What the digital certificate actually lets you do

It is easy to underestimate how much of Spanish public administration has moved online in the last five years. As a non-resident owner, a working certificado digital gets you, without a single phone call or in-person visit:

• File and pay Modelo 210 — the quarterly (or annual) non-resident income-tax return every foreign owner owes on either imputed rental value or actual rental income. See our Modelo 210 guide for what to declare and when.
• File Modelo 720/721 if you are also a Spanish tax resident with foreign assets — see our 720 guide.
• Download IBI, basura and vado bills from your local Ayuntamiento or the Diputación Provincial — most now put everything behind a certificate login and stopped mailing paper years ago.
• Read notificaciones electrónicas from Hacienda. This is the big one. Since 2020 the tax office defaults to electronic notification for anyone with a working certificate, and once you have one you are legally deemed notified ten calendar days after Hacienda posts a letter to your electronic mailbox, whether you read it or not. Miss a notice about a payment shortfall and you lose the right to appeal.
• Empadronamiento, volante de convivencia, and certificado histórico downloads from your town hall — no more queueing at the SAC.
• Registro de la Propiedad — pull an updated nota simple on your own property for free (well, €9), instead of paying a gestor €30.
• DGT (traffic authority) — check multas on any car registered to your NIE, pay them, change the domicilio fiscal, transfer ownership if you sell a car.
• Catastro — reconcile the referencia catastral of your property, download the ficha catastral, and request corrections when the metros construidos on file disagree with reality (see our metros útiles vs construidos guide).
• Seguridad Social — if you ever employ someone in your home (a cleaner, a gardener, a carer for elderly parents visiting on a long-stay visa) you will need this to register them in the Sistema Especial para Empleados de Hogar.
• Sign PDFs with legally binding electronic signatures. A certificate-signed PDF has the same legal weight in Spain as a wet-ink signature on paper, which matters for powers of attorney, community consent forms, and cross-border contracts. See our power of attorney guide for where this comes in during the purchase itself.

None of these are exotic. Every one is a task foreign owners routinely need to do, and every one requires a certificate. The cost of not having one is that you end up paying a gestor €40–€120 each time to do it for you, plus their standing fee. The certificate is free. It pays for itself the first time you avoid one gestor invoice.

Getting the FNMT certificate as a non-resident: the actual path

The FNMT process has three steps. Step one and step three you can do from anywhere in the world. Step two — the identity verification — is the one that traps foreign owners into thinking they need to fly to Spain. You do not. The step-two options that work from abroad are hidden inside two paragraphs on the FNMT website that almost nobody finds.

Step 1: Request the certificate on the FNMT website

Go to sede.fnmt.gob.es → Certificados → Persona Física → Obtener Certificado Software. Choose Solicitar Certificado. You will enter your NIE, first surname, and an email address. Do this from the browser and machine you will actually use to sign tax returns — the private key generated at this step is bound to that specific browser installation, and the certificate is meaningless without it. If you generate the request on your laptop and then verify identity, the certificate you download later can only be installed on the same laptop, same browser, same user account.

The site will give you a código de solicitud — a nine-digit reference code. Save it in a password manager. You need it in step 2 and again in step 3.

Modern browsers do not natively support the older certificate-request APIs the FNMT uses, so you need a small helper called Configurador FNMT-RCM. Download it from the FNMT site (versions for Windows, macOS and Linux); install it; restart the browser. On macOS the installer is not signed by an Apple-notarised developer, so you will have to right-click → Open the first time. Corporate laptops with locked-down installers will refuse; use a personal machine.

Step 2: Verify your identity — the non-resident options

The default instruction on the FNMT site tells you to bring your DNI/NIE to a Oficina de Acreditación de Identidad — a physical office, usually inside a Hacienda branch or a Seguridad Social office. This is the "fly to Spain" trap. There are three ways around it:

Option A — the Spanish consulate in your country of residence. All Spanish consulates in the EU, UK, US, Canada, Australia, Singapore and most of the Gulf are accredited oficinas de registro for FNMT identity verification. You book a cita previa on the consulate's site, show up with your passport, NIE (both original and a photocopy), and the código de solicitud from step 1, and the consular officer verifies your identity and transmits confirmation to the FNMT. This is the cleanest path and works from every major country.

Option B — video-identification (identificación telemática). Since 2022 the FNMT has offered a fully remote video-identification alternative through a partner (currently Camerfirma and EADTrust). You book a slot, join a video call with an accredited operator, show your passport and NIE to camera, they capture a liveness scan, and if they clear you the FNMT issues the certificate. It costs €12–€24 depending on provider. Not every foreign passport is on the accepted list — check the provider's list before booking — but for major-country passports it is now the fastest path (48 hours end to end, no travel).

Option C — verify on your next trip. If you happen to be in Spain anyway — a viewing trip, a signing, a holiday — walk into any of the ~2,500 oficinas de registro on the FNMT map. Take a paper ticket, wait 20 minutes, show your NIE certificate (the green A4 sheet — not the TIE card if you have one; both are technically valid but the paper version causes zero friction and the plastic TIE occasionally causes a supervisor call), hand over the código de solicitud, and you are done in five minutes. If you are combining this with the viewing-trip playbook, see our viewing trip guide for the two-hour window to slot it into.

Step 3: Download the certificate

Back at the same browser, same machine, same código de solicitud: return to the FNMT site → Descargar Certificado. It downloads and installs into the browser's certificate store automatically. Immediately export a backup as a .pfx (Windows) or .p12 (macOS) file with a strong password, and store it in a password manager or encrypted vault. If the browser profile is ever deleted, corrupted, or the laptop is stolen, the exported backup is the only way to recover — the FNMT itself does not keep a copy of your private key.

Once installed, test it by visiting sede.agenciatributaria.gob.es → Mis expedientes → Acceder con certificado. If a dialog pops up asking which certificate to use and you land on a page addressed to your own NIE, you are done.

Why the certificate refuses to work: the eight recurring failure modes

More foreign owners give up at this stage than at any other. The certificate is installed, the browser refuses to use it, the tax office throws a red error page, and everyone concludes "Spanish e-government is broken." It is not broken; it has predictable failure modes, and they are almost always fixable in under ten minutes.

1. You installed the certificate in Chrome but you are signing in with Safari (or vice versa). Certificates are per-browser on macOS Big Sur and older, and per-user profile on Windows. Firefox has its own certificate store entirely separate from the OS. Install in the browser you actually use.

2. Autofirma is not installed. Most Hacienda flows for filing Modelo 210 etc. do not read the certificate directly from the browser any more; they hand off to a small Java-based signer called Autofirma, which reads the certificate from the OS keystore. If Autofirma is missing, you get an error like "No se ha podido invocar la aplicación de firma". Download Autofirma from the same FNMT/PAe site, install, restart the browser. Free.

3. You are on a Mac with Autofirma installed but macOS Gatekeeper is blocking it. System Settings → Privacy & Security → Allow Anyway. Then relaunch.

4. Corporate laptop, corporate VPN, or corporate MDM. IT departments strip Java runtimes, block unsigned installers, and inject their own root certificates that confuse the AEAT's TLS chain. If you cannot install what you need on the machine, do not fight it. Use a personal laptop.

5. Browser is too new. Every 6–12 months Chrome or Edge deprecates a TLS feature the AEAT still relies on. If a familiar workflow suddenly breaks, try Firefox — it moves slower on the same deprecations and often keeps working for another cycle.

6. The certificate is expired. FNMT Persona Física certificates last four years. There is no renewal notice by email; you have to know. Set a calendar reminder. Renewal is done via the Renovar Certificado flow at the FNMT site, using the existing certificate to authenticate — you do not have to go back to a registration office if you renew before it expires. Miss the expiry window and you are back to step 1.

7. Certificate revoked because you were declared fallecido. Yes, this happens, and yes, to living foreign owners. The AEAT's systems occasionally cross-reference the Registro Civil and mis-flag a NIE. If your certificate suddenly stops working and the error says "Certificado revocado", contact the FNMT and be prepared for a slow month.

8. Wrong certificate for the wrong task. The Persona Física certificate is for you as an individual. Owning a Spanish company (an SL) requires an additional Representante certificate. If you followed our SL vs individual guide and bought through an SL, you need both. Filing corporate taxes with a personal certificate throws a permissions error, not a certificate error, so it is easy to misdiagnose.

The Cl@ve system: worth adding once you have a Spanish SIM

Once you spend enough time in Spain to have a Spanish mobile number that will still work in two years — a permanent contract SIM from Movistar, Vodafone, Orange, or a virtual operator like Digi or Simyo — Cl@ve becomes a nice complement to the certificate.

Cl@ve PIN is single-use: you request a login, an SMS arrives, you type the PIN, you are in for a session. It is convenient for logins from a phone or a public computer where you do not want to import a certificate. Enrolment can be done online with your certificate (the loop closes back on the certificate you already have), by video-call with the AEAT, or in person at a Hacienda office.

Cl@ve Permanente is a permanent username + password + SMS second factor. It is the closest thing Spain has to a "log in with your government account." Most useful for Seguridad Social flows, the DGT, and the Sede Electrónica del Catastro.

Neither of these replaces the certificate for the things a foreign owner most often needs — legally binding electronic signatures on documents, downloading and signing tax filings, and receiving notificaciones electrónicas. They are additions, not substitutes.

The electronic notifications trap

If you take one other thing from this article: the moment you have a working certificate, decide deliberately whether you want to be enrolled in electronic notifications. Being enrolled means Hacienda stops mailing you paper and instead posts letters to a virtual mailbox at notificaciones.060.es (or the AEAT's own Dirección Electrónica Habilitada Única, DEHú). Ten calendar days after a letter is posted there, you are legally deemed to have read it, whether you actually did or not.

For non-residents who check the mailbox sporadically, this is dangerous. Missed notifications mean missed appeal deadlines, missed requerimientos, and apremio surcharges of 20% on unpaid tax. The mitigation is simple but has to be actively set up:

• Subscribe to email/SMS alerts at DEHú so that every new notification triggers an email to your real inbox. Free, takes two minutes.
• Set the días de cortesía — a legal right to designate 30 days per year on which Hacienda will not deliver electronic notifications (typically your longest travel or offline periods). Set them via the AEAT sede at the start of each year.
• Delegate reading of the mailbox to your gestor with a specific electronic authorisation. Our gestor guide covers the apoderamiento apud acta electrónico that lets a gestor read your notifications on your behalf without also giving them signing authority.

Ignoring this is one of the most common ways foreign owners walk into an avoidable €1,000–€5,000 tax problem, and it is entirely a consequence of having got the certificate without thinking through the side effect.

The renewal, revocation, and laptop-change checklist

The certificate is not a set-and-forget item. A short annual routine keeps it healthy:

• Every January: check the certificate expiry date (Chrome → Settings → Privacy → Security → Manage certificates). If it expires this year, renew it before the expiry — after expiry you have to start over.
• Every January: set the year's días de cortesía for electronic notifications.
• Every time you get a new laptop or reset the OS: import the backup .pfx/.p12 file into the new browser before wiping the old one. If you skip this and the old one is gone, you will need to re-issue from scratch.
• If a laptop is stolen or the file leaks: revoke the certificate immediately at the FNMT site (using another certificate if you have one, or by phone). An unrevoked leaked certificate can be used by whoever holds it to file tax returns and sign contracts on your behalf.
• If you change your NIE (rare, but happens when a temporary NIE-K gets upgraded to a permanent NIE): the certificate is bound to the NIE string, so you need a new one.

The pattern that works

Working backwards from what actually keeps foreign owners fluent in Spanish public administration:

1. Before completion: request the FNMT certificate from your home country, verify at the Spanish consulate, download. You now have a working legal identity online in Spain before you even own the flat.
2. At completion: your lawyer will register the new deed at the Registro de la Propiedad and file the Modelo 600 transfer tax. Once your name appears on the Catastro (2–8 weeks), log in with your certificate and confirm the referencia catastral, titularidad and superficie construida are correct.
3. In the first 90 days: subscribe to notification alerts at DEHú, appoint a gestor with delegated notification-reading authority if you will not be checking regularly, set up direct debit for IBI, basura and vado at the Ayuntamiento website.
4. Every January: renewals, cortesía days, backup export refreshed.
5. Every quarter or annually: sign your own Modelo 210 or approve the version your gestor prepared, using the certificate.

That is the whole pattern. It is worth the afternoon it takes to set up because it removes a compounding source of friction that would otherwise cost you a gestor invoice every second month for the rest of your ownership.

Where Buvivo fits in

Buvivo is the reverse marketplace where Spanish agents come to you with properties that match your brief, so you spend less time doom-scrolling Idealista and more time actually preparing for the paperwork side of buying — of which the certificate is a small but disproportionately useful piece. Post your brief in the currency and language you actually think in, and let matching properties come to you while the practical scaffolding — NIE, certificate, bank account, lawyer, gestor — comes together in parallel.

If you are earlier in the process, start with the complete buying guide for foreigners, the NIE application walkthrough, and the Spanish bank account guide for non-residents. The certificate is the piece that makes all three of those things useful once you have them.