How to delete your MitID account

About deleting your MitID account

MitID is the mandatory digital identity solution used by Danish citizens to access public and private digital services, including banking, tax portals (SKAT), and health platforms. Because it serves as a secure gateway to highly sensitive government and financial infrastructure, the account management process is strictly controlled by the Digital Agency (Digitaliseringsstyrelsen).

Unlike standard web services, you cannot simply click a delete button in your profile settings. Reasons for deactivation often include:

• Moving permanently out of Denmark and no longer requiring access to Danish public services.
• Compromise of your MitID credentials necessitating a complete reset or identity verification.
• Simplifying your digital footprint by consolidating identity methods.
• Security concerns regarding unauthorized access to the authentication app or hardware tokens.

What happens to your data

When you request the deactivation of your MitID, your digital identity is suspended to prevent further authentication. However, MitID acts as a central identity provider (IdP), and while the authentication link is severed, the underlying records linked to your CPR number (Civil Registration Number) remain within the state's secure infrastructure to maintain legal compliance.

Data collected and processed by MitID includes:

• Full name and CPR number.
• Authentication logs (timestamps and service access history).
• Device binding information (linking your unique device ID to your identity).
• Biometric data if configured for app-based verification.
• Recovery codes and alternative identification credentials.

While deactivation stops the ability to log in, the Digital Agency is often legally required to retain audit trails of who has accessed specific services, meaning your usage history is not deleted immediately upon deactivating the identity tool itself.

Privacy considerations

MitID is designed to provide high-assurance identification, which means it tracks identity verification events across various public and private sectors. Users should be aware that the central nature of MitID allows for a high degree of correlation between your digital activities across different service providers.

Privacy tips for MitID users:

• Regularly review your access history via the MitID website to ensure no unauthorized services are using your ID.
• Never share your MitID codes with anyone, including bank employees or support staff, as this is a primary vector for identity theft.
• If you suspect your device is compromised, immediately deactivate the specific token or app instance via the MitID self-service portal before seeking full account closure.

Frequently Asked Questions

Can I delete my MitID entirely online?

No, you cannot delete it via an online button. Due to security protocols, identity deactivation requires verification, which must be handled by contacting the support center or visiting a Borgerservice.

Does deleting MitID affect my ability to use NemLog-in?

Yes, MitID is the primary authentication method for NemLog-in. Deactivating your MitID will restrict your access to the broader Danish public service infrastructure.

Will my bank account be closed if I delete my MitID?

No, your bank account remains open, but you will likely lose the ability to log into your online banking portal, as most Danish banks require MitID for secure access.

What should I do if I lose my MitID device?

You should immediately block that specific authenticator through the MitID website or by calling support. This is distinct from deleting your entire account identity.

Is it possible to reactivate a deleted MitID account?

If your account has been fully deleted, you will likely need to re-register your identity as if you were a new user, which requires a new verification process at an identity proofing station.

Does MitID track which websites I visit?

MitID tracks authentication events, meaning it records which services you have logged into using your digital identity to ensure accountability and detect fraudulent login attempts.