What is DigiLocker?
- DigiLocker is a flagship initiative of the Ministry of Electronics & IT (MeitY) under the Digital India programme, launched in 2015.
- DigiLocker platform operates as an App to store users’ digital records. The app is aimed at letting users access, verify, and store essential documents in a digital wallet so that they are easy to retrieve and present to officials when required.
- The issued documents in DigiLocker system are deemed to be at par with original physical documents as per Rule 9A of the Information Technology (Preservation and Retention of Information by Intermediaries providing Digital Locker facilities) Rules, 2016.
- Utility: The app can be used to prove users’ identity and their credentials. E.g., when applying for a passport, reviewing marksheets, or proving one’s identity during travel.
- DigiLocker has been built on top of open-source digital platforms.
- Open-source digital platforms typically consist of software and tools that are freely available for anyone to use, modify, and distribute.
- Core code behind DigiLocker is built using freely available open-source software. This allows anyone to examine the code, understand how it works, and even contribute improvements. This fosters collaboration and can lead to a more secure and reliable system.
- Users’ data: As of May 2024, the app has over 270 million registered users, while nearly 6.7 billion documents — like Aadhaar, insurance policy papers, PAN records, and driving licences — have been retrieved through it.
How secure is DigiLocker?
- DigiLocker is ideally maintained with standard security measures in place including 2048 Bit RSA SSL encryption, multi-factor authentication (OTP verification), consent systems, timed log outs, and security audits.
- No DigiLocker data is shared with third parties and data is encrypted in transit. Examples of data collected include files and documents (optional), your name, email (optional), and user IDs.
- However, any government database that stores citizens’ information and documents is inevitably an attractive target for hackers who steal user data and sell it on the dark web.
- On June 2, 2020, DigiLocker posted a notice about a “potential vulnerability in the sign-up flow,” that could have led to accounts being compromised. However, due to a CERT-In alert and another independent researcher, DigiLocker said that the vulnerability was patched within a day of getting the alert, and that user data was safe.
Benefits of DigiLocker:
- Paperless solution to prove users’ identity and their credentials.
- Allows users to access their e-documents irrespective of their physical location.
- Prevents fake, poor quality print copies, and outdated documents that miss key details.
- Eliminates the need to carry separate sets of documents while travelling.
Limitations of DigiLocker:
While DigiLocker offers a compelling alternative to physical documents, but it is not quite a complete replacement yet.
- Not universally accepted: While acceptance is growing, some organisations might still require physical documents.
- Digital Literacy Gap: Not everyone has access to technology or the skills to use DigiLocker.
- Infrastructure Dependence: Reliance on internet connectivity can be a hurdle in some areas.