Wathim

eKey National Authentication

eKey is Bahrain's national single-sign-on identity — one CPR-bound credential for bahrain.bh, MyGov, NBR, Sijilat, banks and 300+ services.

Launched

2010 (eKey); 2024 (eKey 2.0 with biometric and AI eKYC)

Operator

Information and eGovernment Authority - Kingdom of Bahrain

Cost

Free (no fees for registration, upgrade, or use of the identity)

Languages

Arabic, English

Overview

eKey is the Kingdom of Bahrain's national authentication and digital-identity solution, issued and operated by the Information and eGovernment Authority and bound to each resident's CPR number. Since launch in 2010 eKey has been the master login across bahrain.bh, the MyGov mobile application and an expanding catalogue of integrated public and private services; the eKey 2.0 release (late 2024) added AI-driven eKYC, biometric login on the mobile app, and digital signature, and is the recommended client across iOS and Android in {year}.

eKey exists in two tiers. Standard eKey is the lightweight tier: the user registers online with CPR, name, and the mobile number registered against the CPR in iGA records, and a password; subsequent logins use CPR plus password plus SMS OTP. Standard eKey is enough for routine services (fine checks, certificate downloads, appointment booking, simple residence queries). Advanced eKey is the high-assurance tier: the user visits any iGA centre (Isa Town, Seef Mall, Hidd) once, completes biometric capture (fingerprint, facial image, signature), and the eKey is upgraded permanently. Advanced eKey is required for high-value services (vehicle ownership transfer, NPRA family residence applications, MOFA attestation submissions, federated SSO into Sijilat and NBR, and most bank onboarding flows that integrate with eKey).

eKey 2.0 — the current mobile client — adds eKYC-grade biometric login (the device biometrics anchor a server-side trust signal rather than just unlocking the local app), AI-based liveness checks for spoofing protection, digital signature for consent flows on integrated services, and a consent dashboard where the user can see which third parties have requested identity attributes and revoke consent. The legacy eKey site at ekey.bh remains functional for routine flows but is being progressively retired in favour of eKey 2.0 as the canonical client.

Daily-use texture: a resident reaches eKey indirectly almost every time they touch bahrain.bh, MyGov, NBR, Sijilat, the LMRA establishment portal, or one of the integrated bank onboarding flows. The eKey screen is the recurring login surface; the user enters CPR plus password, receives an SMS OTP (standard tier) or completes biometric on the eKey 2.0 app (advanced tier), and is bounced back to the originating service. Federated SSO means subsequent jumps to other integrated portals do not require re-authentication for the duration of the session.

The single most common eKey friction is the mobile-number-on-CPR mismatch. eKey OTP is sent only to the mobile number registered against the CPR in iGA records, not to whatever mobile number is currently active on the resident's SIM. When residents change SIMs without updating the CPR record (which is a free in-person update at any iGA centre), the OTP routes to a number they no longer control and registration fails silently. The fix is always the same: visit an iGA centre with the CPR and a SIM in your own name; update the registered mobile; retry eKey registration or OTP. The eGovernment helpline at 80008001 cannot reset this remotely because the verification depends on physical possession of the CPR.

For businesses, eKey is the foundation of corporate workflows on Sijilat, NBR and LMRA. Every individual corporate user (CEO, CFO, HR officer, accountant, compliance officer) holds their own advanced-tier eKey, and the authorisation to act on a corporate entity is managed at each ministry portal against the establishment record. There is no separate corporate eKey; the model is individuals with eKey acting on entities they are authorised against. Finance teams that try to share a single eKey across users hit access logs that block the behaviour and create compliance issues.

What changed and what to know in {year}: eKey 2.0 is the default download and the legacy ekey.bh login is being phased out, biometric login on eKey 2.0 supplants SMS OTP for advanced-tier users, federated SSO covers more private-sector integrations (banks, telecom self-care, school admissions), and AI-based liveness checks have closed the spoofing gap that earlier mobile clients had. The consent dashboard in eKey 2.0 is genuinely useful — review periodically to revoke third-party access you no longer need. For everything platform-related, the operator is iGA and the helpline is 80008001.

Services offered

Standard eKey Registration

Online registration of the lightweight eKey tier using CPR, name, and the mobile number registered against the CPR in iGA records. Sufficient for routine services. Free, takes minutes, and can be done entirely from a phone or laptop without visiting any office, provided the CPR-linked mobile is reachable.

Advanced eKey Biometric Upgrade

One-time in-person upgrade at any iGA centre (Isa Town, Seef Mall, Hidd) that captures fingerprint, facial image and signature and binds them to the eKey. Required for high-value services and for federated SSO into Sijilat, NBR and LMRA. Permanent until passport or mobile change; reusable across all integrated services.

eKey 2.0 Mobile Application

The current canonical eKey client for iOS and Android. Biometric login using device biometrics anchored to server-side trust, AI liveness checks against spoofing, digital signature for consent flows, and the consent dashboard for managing third-party access. Replaces the legacy ekey.bh login as the default for advanced-tier users.

Single Sign-On Across 300+ Services

Logged-in eKey sessions flow into bahrain.bh, MyGov, the LMRA establishment portal, Sijilat, the National Bureau for Revenue, selected banks, telecom self-care portals and school admissions systems. The depth of integration depends on the tier (standard versus advanced) and the integrated service's requirements.

Digital Signature and Consent

eKey 2.0 issues device-backed digital signatures used to consent to identity-attribute sharing with third parties (bank onboarding, telecom number ports, employer HR systems) and to authorise high-value actions on government portals. The signature is verifiable through the eKey trust chain.

Consent Dashboard

List of third parties that have requested identity attributes via eKey, with the date of consent and the scope of attributes shared. The user can revoke consent at any time, after which the third party can no longer pull attributes (existing records they have already received are not retracted). Review periodically as a hygiene practice.

Account Recovery and Password Reset

Self-service password reset via the CPR-linked mobile OTP, biometric recovery on eKey 2.0 for advanced-tier users, and in-person recovery at any iGA centre when the CPR-linked mobile is no longer reachable. The in-person path is the only option when the mobile cannot receive OTP.

eKYC for Private-Sector Onboarding

The eKey 2.0 eKYC service lets integrated private-sector providers (banks, fintech, telecoms, insurance) onboard customers using eKey identity attributes instead of requiring repeat document submission and biometric capture. Reduces friction at account opening and is increasingly the default in {year}.

How to access eKey

  1. 1

    Confirm the mobile registered on your CPR

    eKey OTP routes to the mobile number registered against your CPR in iGA records, not to your current SIM unless they are the same. If you have changed numbers since you arrived in Bahrain, visit any iGA centre (Isa Town, Seef Mall, Hidd) with the CPR and a SIM in your own name and update the registered mobile first. This is free and takes minutes.

  2. 2

    Register standard eKey online

    Download eKey 2.0 from the App Store or Google Play (or go to ekey.bh on the web). Choose 'Register', enter CPR and name, receive an SMS OTP on the CPR-linked mobile, set a password. Standard eKey is active immediately.

  3. 3

    Use standard eKey for routine services

    Sign in to bahrain.bh, MyGov or any integrated service. Standard eKey covers fine checks, certificate downloads, CPR address updates, MOH appointment booking, and most consumer service flows. The session lasts for typical idle timeouts and federates across portals during the session.

  4. 4

    Upgrade to advanced eKey for high-value services

    Book a slot at any iGA centre on bahrain.bh, bring the original CPR card, and complete the in-person biometric capture (fingerprint, facial image, signature) in one session. The upgrade is permanent and works across all integrated services thereafter, including federated SSO into Sijilat and NBR and bank onboarding via eKey eKYC.

  5. 5

    Manage consent and recover access

    Open the eKey 2.0 app's consent dashboard periodically to review which third parties have eKey access and revoke any you no longer want. For password reset, use the in-app reset flow with CPR-linked mobile OTP; for biometric recovery, use eKey 2.0's recovery flow; for cases where the CPR-linked mobile is no longer reachable, visit an iGA centre.

Troubleshooting

The errors residents hit most often on eKey, and the fix that works.

Mobile registered on the CPR is the problem in 90% of cases. Visit any iGA centre (Isa Town, Seef Mall, Hidd) with the CPR and a SIM in your own name; the agent updates the registered mobile in minutes and the eKey re-binds. The eGovernment helpline at 80008001 cannot reset this remotely.

You are on standard-tier eKey trying to do an advanced-tier action. The login passes the standard-tier gate but the service's policy needs advanced tier. Upgrade once at any iGA centre with biometric capture; the issue disappears across all integrated services.

Operating system updates sometimes invalidate the device biometric binding. Sign in with CPR plus password plus SMS OTP once after the update; re-enable biometric login in app settings; the binding refreshes.

FSSO requires advanced-tier eKey. Standard tier sees the SSO link but the cross-portal session aborts. Upgrade at an iGA centre. If already advanced and still failing, clear browser cookies for the two domains and retry; if persistent, call iGA at 80008001 to force a federated trust refresh.

Wait 30 minutes for automatic unlock or use eKey 2.0's biometric recovery (advanced tier). If the lock recurs, change your password to one that is not in any breach corpus and re-enable biometric on the app.

The bank's eKey integration requires advanced tier and a current consent grant. Confirm advanced tier is active, check the eKey 2.0 consent dashboard for any blocked or revoked grants for that bank, and re-initiate the onboarding flow from the bank's app.

Most issues are browser-side: clear cookies and cache for bahrain.bh and ekey.bh, try a different browser, and disable VPN if active. The credential is the same across surfaces; the failure is almost always client-side.

Frequently asked questions

Check three things in order. First, is the mobile registered on your CPR still active and in your possession? OTP routes only to that number; if you have changed SIMs without updating the CPR, the OTP goes to a number you no longer control. Second, are you on standard-tier eKey trying to do an advanced-tier action? If yes, upgrade at an iGA centre. Third, is your account temporarily locked after multiple failed attempts? Wait 30 minutes or use eKey 2.0's biometric recovery. The fix for the first two requires an in-person iGA visit; the third resolves itself.

Download eKey 2.0 from the App Store or Google Play, choose Register, enter CPR and name, complete the SMS OTP on the CPR-linked mobile, set a password. Standard eKey is active immediately. If the OTP does not arrive, the mobile registered on your CPR is the problem; visit any iGA centre with the CPR and a SIM in your name to fix it first.

Standard eKey is online-registered, uses CPR plus password plus SMS OTP, and covers routine services (fine checks, certificates, MOH bookings). Advanced eKey requires a one-time in-person biometric capture at an iGA centre and unlocks high-value services (NPRA family residence, vehicle ownership transfer, MOFA submissions, federated SSO into Sijilat and NBR, bank onboarding via eKey eKYC) plus biometric login on eKey 2.0.

Book a slot at any iGA centre (Isa Town, Seef Mall, Hidd) via bahrain.bh, bring the original CPR card, and complete the in-person biometric capture (fingerprint, facial image, signature). The session takes a few minutes; the upgrade is permanent until passport or mobile change. Advanced tier propagates across all integrated services within 24 hours.

Same identity, different client. eKey 2.0 is the current canonical mobile client with biometric login, AI liveness checks, digital signature and the consent dashboard. The legacy ekey.bh web login still works but is being progressively retired. For advanced-tier users in {year}, eKey 2.0 is the recommended login surface.

eKey OTP routes to the mobile number registered against your CPR in iGA records, set when the CPR was issued or the last time the mobile was updated. When you change SIMs without updating the CPR, the OTP keeps going to the old number until the CPR record is updated at an iGA centre. The eGovernment helpline at 80008001 cannot reset this remotely because the update needs physical possession of the CPR.

Yes for integrated banks. Several Bahraini banks accept eKey for onboarding (eKYC) and for some self-service flows. The depth depends on the bank's integration; some support full SSO, others use eKey only at account opening and revert to bank-issued credentials afterward. Check the bank's app for the eKey login option.

Yes for the credential — you can log in to bahrain.bh and MyGov from abroad. The SMS OTP needs the CPR-linked mobile to be roaming-enabled or to have an alternative reachable. eKey 2.0's biometric login works on a logged-in device regardless of location, which is the easier path when travelling.

No. eKey is issued to individuals against the CPR. Corporate workflows work by individuals with eKey acting on entities they are authorised against in Sijilat, NBR or LMRA. Every corporate user should have their own advanced-tier eKey; sharing a single eKey across users is logged and creates compliance issues.

It lists every third party (bank, telecom, employer system, school portal, etc.) that has requested your identity attributes via eKey, the date of consent, and the scope of attributes shared. You can revoke any consent and the third party loses pull access going forward (existing records they already have are not retracted). Review periodically as a hygiene practice.

Reinstall eKey 2.0 on a new device, sign in with CPR and password, complete SMS OTP on the CPR-linked mobile (which is your number, not the lost device's SIM if they differ). If the CPR-linked mobile is also lost or unreachable, visit any iGA centre with the CPR to rebind. Plan recovery before travel if the CPR-linked SIM is not roaming-enabled.

No. Standard eKey registration is free, the advanced biometric upgrade is free, eKey 2.0 is a free download, and password reset is free. The fees you see during service usage are the underlying government service fees, not eKey fees.

Passport renewal: update the passport details on NPRA via bahrain.bh; eKey re-binds to the new passport within 24 hours. CPR renewal: the CPR number itself does not change for residents, so eKey is unaffected. Biometric upgrade carries over. Change of mobile number requires an iGA-centre visit to rebind.

Standard eKey can be deactivated through the eKey 2.0 app or by request via the iGA helpline; it can be re-registered later. Advanced (biometric) eKey deletion requires an in-person iGA centre visit with the CPR. Note that deactivation does not erase consent records or transactions already completed.

Stuck on a eKey transaction?

If the portal will not cooperate, our desk can take the filing from here. Free guidance call to start, fixed desk fee to engage.