Nafath
Saudi Arabia's national digital identity authentication app. Face-scan login to Absher, Qiwa, Najiz, Muqeem, ZATCA, and Saudi banks.
On this page
Launched
2018
Operator
Saudi National Information Center
Cost
Free
Languages
Arabic, English
Overview
Nafath (iam.gov.sa) is Saudi Arabia's national digital identity and authentication app, operated by the National Information Center and the Unified National Access Platform. It is the biometric login layer that sits behind almost every Saudi government portal and most banks and telecoms: open Absher and the login asks for a Nafath face-scan; open Qiwa to sign a labour contract and the signature comes from Nafath; notarise a document on Najiz and the consent is given through Nafath; verify identity at a bank or telecom for a new account and the KYC step routes through Nafath. As of 2026 more than 150 platforms integrate Nafath as the identity provider.
Nafath supports two authentication modes. The push-and-approve mode sends a notification to the registered device when a login attempt is made elsewhere; the user opens the notification and approves with face-scan. This is the standard mode for routine logins. The active-authenticate mode is initiated from inside Nafath itself, generating a number that the user enters on the portal to confirm session ownership. Both modes complete in seconds and have replaced the password-and-OTP flows that previously dominated Saudi government portals.
Three points matter operationally. First, Nafath registration requires the user to first hold an active Absher account because the Nafath bind uses the Absher password as part of the initial enrolment. Second, the March 2026 update significantly improved face-recognition speed, removing the friction many older users complained about. Third, Nafath is not optional for most government transactions in 2026; password-based logins for Saudi government portals have been largely replaced by biometric authentication through Nafath, so any resident or citizen who has not enrolled is effectively locked out of large parts of the government stack. Confirm specific portal authentication requirements before assuming a non-Nafath workaround.
For Saudi residents and citizens Nafath is the foundational identity authentication layer - face-scan login that unlocks Absher, Qiwa, Najiz, ZATCA, Tawakkalna, and most other Saudi government portals. The 2026 setup: enrol Nafath as the first step on arrival (10 minutes at any kiosk with the physical Iqama), bind to the face-scan, and from then on every government login is a one-tap face-scan from the Nafath app. Without Nafath, the rest of the Saudi government digital stack is materially slower because OTP fallback is the only path. Country context at our Saudi Arabia guide.
What changed and matters operationally in 2026: Nafath is now also the digital signature for Qiwa employment contracts, Najiz notarisations, Premium Residency applications, and a growing list of bank and insurance transactions; the face-scan binds to the Iqama, so SIM changes, phone changes, and passport renewals can break the enrolment if not handled carefully; the kiosk network for re-enrolment has expanded (most major malls and ICP centres have one). The most common failure is the face-scan against an old Iqama photo - residents with stale photos should plan for a kiosk visit.
Services offered
Biometric Login
Face-scan login to Absher, Tawakkalna, Qiwa, Najiz, Muqeem, ZATCA, GOSI, Sehhaty, Tawakkalna Business, and most other Saudi government portals.
Digital Contract Signing
Sign Qiwa employment contracts, Najiz notarised deeds, and many bank and telecom forms with the Nafath digital signature, which carries legal weight equivalent to a wet-ink signature.
Bank and Telecom KYC
Open a new bank account or activate a new SIM with Nafath as the KYC step; the bank or telecom requests Nafath authentication and the user approves from their phone.
Approval Workflow
Approve sensitive transactions (large transfers, government documents) initiated elsewhere by approving the Nafath push notification on the trusted device.
Multi-Device Management
Add or remove trusted devices, with the older device required to authorise the change. Loss of a phone requires kiosk re-enrolment.
How to access Nafath
- 1
Have an active Absher account
Before installing Nafath, confirm your Absher account is active and you remember your Absher password. Nafath enrolment uses Absher credentials as part of the bind. New residents typically activate Absher first, then enrol in Nafath.
- 2
Install Nafath
Download Nafath (نفاذ) from the App Store or Google Play. Publisher is the National Information Center. The app is free.
- 3
Activate the account
Open the app, tap Activate, enter your Iqama or National ID number and Absher password, and complete the SMS OTP to the registered Saudi number. Create a 6-digit PIN to access your Nafath account.
- 4
Complete face verification
Enable face verification by completing the biometric scan tied to your Iqama or National ID. Stand in good light, hold the phone at eye level, follow the on-screen prompts. The scan takes about 30 seconds. Once verified, future approvals are a one-tap face-scan.
- 5
Use Nafath for all portal logins
On any Saudi government or partner platform, choose Login with Nafath. The portal pushes a notification to your device. Open the notification, approve with face-scan, return to the portal logged in. Some portals use the number-display mode where you enter a 2-digit code from Nafath into the portal.
Troubleshooting
The errors residents hit most often on Nafath, and the fix that works.
SIM must be registered to your Iqama. Move SIM at operator with Iqama and passport, then update Nafath registration.
Iqama photo likely outdated. Visit any Absher kiosk with physical Iqama; agent re-captures fresh photo in 5 minutes.
Re-install, register with Iqama and same Saudi mobile. Complete face-scan. If SIM also changed, kiosk visit needed.
Re-authenticate via face-scan. Sessions time out after 30 minutes of inactivity for security.
Some workflows require fresh Nafath signature even within active session. Tap the prompt; the face-scan re-validates.
Nafath enrolment may have lapsed. Re-enrol via face-scan; for persistent failure, kiosk visit.
Only Al Rajhi, Riyad Bank, SNB, and Bank AlBilad support Absher/Nafath re-activation through bank channels. Other banks: use kiosk.
Frequently asked questions
For most government portals as of 2026, yes. Password-based logins have been largely replaced by Nafath biometric authentication on Absher, Qiwa, Najiz, Muqeem, ZATCA, GOSI and Sehhaty. Some public-tier lookups still work without Nafath, but any personalised transaction requires it.
Yes. The app and all authentication usage are free. Only the underlying government or bank transaction fees apply, which are unrelated to Nafath.
Yes for daily logins, as long as the bound device has internet. The face-scan and PIN both work over any internet connection. The initial enrolment and any re-bind after a phone change require the registered Saudi SIM to be active and reachable; many residents who let the SIM lapse during long trips abroad find themselves locked out and need to wait until they return.
The Nafath authentication on the lost device is invalidated as soon as you remove it from trusted devices. To restore Nafath on a new phone, install the app, attempt activation, and the system will either guide you through re-binding from another trusted device or send you to a kiosk for in-person re-enrolment with your physical Iqama.
Yes. More than 150 Saudi platforms, including all the major banks (Al Rajhi, SNB, Riyad Bank, ANB, Bank AlBilad) and telecoms (STC, Mobily, Zain), use Nafath as the KYC and authentication layer. Opening a new bank account or activating a new SIM typically routes through a Nafath approval.
Push mode: the portal sends a notification to your device, you approve with face-scan. Number mode: Nafath shows a 2-digit number on the app and on the portal screen and you match them. Both achieve the same authentication; portals choose the mode that suits their flow.
Yes. Nafath signatures carry legal weight equivalent to a wet-ink signature under Saudi e-signature regulations. They are used on Qiwa employment contracts, Najiz notarised deeds, certain ZATCA filings, and a growing list of bank and telecom forms.
Try again in better lighting with no glasses or face covering. If repeated attempts fail, the app prompts a kiosk re-enrolment. Bring your physical Iqama or National ID to any National Information Center kiosk or designated bank channel (Al Rajhi, Riyad Bank, SNB, Bank AlBilad) for re-verification.
Phone change only (same SIM): install Nafath on the new phone, register with Iqama and Saudi mobile, complete the face-scan - the same SIM receives the verification OTP and the binding completes in minutes. SIM change (lost SIM, new operator, ported number): the OTP cannot reach the new SIM until the underlying Iqama-mobile link is updated. Visit any Absher kiosk (420+ locations) or your bank's online banking portal (Al Rajhi, Riyad Bank, SNB, Bank AlBilad support Absher account activation including Nafath re-binding) with the new SIM active in your phone. The kiosk re-captures fresh face-scan and updates the mobile binding. Total time about 10 minutes. Plan ahead before travelling because Nafath is the gate to almost every Saudi government service - a broken Nafath enrolment effectively locks you out of digital service access until in-person re-enrolment.
The face-scan algorithm matches against the photo ICP holds on your Iqama file. Common reasons for repeated failure: the Iqama photo is more than 5 years old, significant weight change since the photo was taken, beard or hijab change, glasses on (try removing them), poor lighting (try a bright neutral background). After two failed attempts the app prompts a kiosk visit. At the kiosk, the agent re-captures a fresh photo and pushes verified status back to your account in about 5 minutes; the new photo replaces the old on file. The kiosk network includes Absher self-service kiosks in malls and government buildings; the Nafath app's 'Find Kiosk' feature locates the nearest one. After re-capture the face-scan works reliably for the next few years.
Guides from the blog
Walkthroughs that use Nafath
Step-by-step guides for the most common transactions on this portal.
Saudi Arabia
Absher Account Setup: Register, Activate & Fix Common Errors (2026)
Setting up an Absher account for personal immigration services takes 10 minutes online, but activation (the critical next step) often stalls. We walk you through both, plus fixes for every common error.
GCC
GCC Family Sponsorship Salary Requirements 2026: All 6 Countries, Honest Thresholds
Salaries to bring family to the GCC range from KWD 800 in Kuwait to QAR 10,000 in Qatar. Country-by-country verified thresholds, sponsor-parents rules, what counts as salary, worked examples, and the data conflict around Oman.
GCC
Certificate Attestation for the GCC (2026): Country-by-Country Playbook, Apostille vs Full Chain
Three GCC countries now accept apostille (Saudi, Bahrain, Oman); three still need the full notary-MEA-embassy-MOFA chain (UAE, Qatar, Kuwait). Real costs, realistic timelines, the rejection traps, and worked examples per country.
Stuck on a Nafath transaction?
If the portal will not cooperate, our desk can take the filing from here. Free guidance call to start, fixed desk fee to engage.