The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
GOV.UK One Login is the government’s shared sign-in and identity-check service. It lets you use one account to access participating services, but it does not yet cover every GOV.UK service. The service you are trying to use—not One Login by itself—makes the final decision about whether you can proceed.
This guide explains the available identity-check routes, what information is collected and shared, what to do when a check fails, and how to recover or secure your account.
What GOV.UK One Login does
GOV.UK One Login provides a single way to sign in and prove your identity when accessing government services. The Government Digital Service privacy notice, updated 28 January 2026, describes it as a common account for participating services. Coverage is still being expanded: some services continue to use their own sign-in systems, and One Login will eventually replace other GOV.UK sign-in methods.
One Login handles authentication and identity verification. The government service you selected remains responsible for deciding what evidence it needs, whether your check is sufficient for that service, and whether to grant access. A successful One Login check therefore does not guarantee access to every service, while a failed check may leave an alternative route available through the referring service.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What you need before starting
- An email address is required to create a One Login.
- A phone number is needed if you choose text-message authentication.
- For an app-based route, you may need a compatible smartphone, an identity document and permission to use the camera.
- For the security-question route, you need either suitable photo ID or a current account with a UK bank or building society.
- Have your personal details available exactly as they appear on your documents and with the service you are trying to access.
The route shown to you depends on the referring service and on the evidence available to you. You cannot always choose every method.
Ways to prove your identity
| Route | Evidence and device | What is checked | What happens if it fails |
|---|---|---|---|
| GOV.UK ID Check or GOV.UK One Login app | Supported identity document and a smartphone with a camera | Document authenticity, proof that you are a real person, and likeness between your face and the document photograph. Specialist providers and fraud checks may be involved. | You may be offered another route or sent back to the referring service to use its alternative access method. |
| Security questions | No identity-check app; you must have qualifying photo ID or a current UK bank or building society account | Answers to questions based on records held by the relevant organisations | The service may offer another identity route. One Login says it does not store answers to financial security questions. |
App and document checks
When the app route is offered, install the official GOV.UK ID Check or GOV.UK One Login app identified in the sign-in journey. Follow the prompts to scan the document, capture your face and submit the check. The process can include several separate tests:
- Document authenticity: information or security features are assessed to determine whether the document appears genuine.
- Liveness: the process checks that a real person is present rather than a photograph, recording or mask.
- Likeness: the captured face is compared with the photograph on the document.
- Fraud screening: additional signals can be assessed by specialist identity-checking and fraud-prevention parties.
Good lighting, a clean camera lens, a steady phone and an unobstructed face make the capture easier. Use the document requested by the service and enter details consistently. Do not photograph a screen or use a document that has expired if the journey says it must be current.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesSecurity questions
Some journeys let you prove identity by answering security questions. This option is conditional: you must have the type of photo ID or the current UK bank or building society account that the service accepts. Questions can be drawn from financial or identity records, so an answer that is technically correct but does not match the record may still fail.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Do not guess repeatedly. If a question is unclear or your circumstances have changed, stop and look for the alternative route offered by the service. The One Login privacy notice states that answers to financial security questions are not stored by One Login.
What to do when an identity check fails
First, read the result carefully
A failure can relate to the document, the face capture, a mismatch in personal details, a technical problem or a fraud-prevention signal. The message may identify a reason, but it may not reveal every detection rule. Record the exact wording and any reference number before leaving the page.
Try the permitted recovery path
- Check that your name, date of birth and address match the document and the information held by the service.
- Retry the app check only after correcting the stated problem. Improve lighting, remove glasses or a hat if requested, clean the camera lens and keep the phone steady.
- If One Login offers another identity method, select it and complete that route instead of repeatedly submitting the same failed capture.
- If the journey returns you to the government service, follow that service’s alternative sign-in or identity instructions.
- Use the official One Login troubleshooting or sign-in-detail guidance, and contact the One Login team if the problem is with the account or app.
The referring service still decides whether an alternative check is acceptable. One Login support cannot grant access to a service whose own rules reject the evidence.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What information One Login collects
Creating an account requires an email address. If you use text-message authentication, a phone number is also processed. During sign-in and identity checking, the service may process the following categories:
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- Name, address and date of birth.
- Identity-document type and related document details.
- The result of an identity check and, where applicable, a failure reason.
- Device, browser and other technical information needed to operate and protect the service.
- Fraud-prevention signals and information used to detect identity theft or suspicious activity.
- A limited registration and account-activity audit trail.
The privacy notice distinguishes information used during a check from information retained in the One Login account. It says stored information is limited to basic data such as your name, address, email address, document type, check status and a limited registration audit trail. It also says One Login does not store personal data beyond this basic information and does not store answers to financial security questions.
What is shared with the government service
When you sign in or prove your identity, the service you are accessing normally receives the identity-check result, any applicable failure reason and matching information. The matching information typically includes your name, date of birth and address. The service may receive only the information needed to make its own access decision; it does not automatically receive every detail processed during the check.
Other government services are independent data controllers. Each has its own privacy notice explaining why it uses the information, how long it keeps it and how to exercise rights. Read the privacy notice for the specific service as well as the One Login notice if you need the full retention and sharing details.
Recommended Free Tools
Organisations involved in checking and fraud prevention
The One Login privacy notice names HM Passport Office, DVLA, HMRC, Experian, iProov, Veriff and Inverid among organisations that may support checking or fraud prevention. The notice says only the minimum information needed for the relevant check is provided. The exact parties involved can vary by journey, document and service.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
How data-use decisions are meant to work
Government implementation principles require each requested data item to be justified, users to be told how their information is processed, and background checks to be proportionate to the risk of fraud and identity theft. In practical terms, a service should request evidence that is relevant to its access decision rather than collecting unrelated details.
If you are unsure why a field or check is required, look at the explanation beside it and the privacy notice for the referring service. A request for additional information can reflect that service’s legal or safeguarding requirements, not a change to the basic One Login account.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Recovering and managing your One Login account
After signing in, account settings let you manage several recovery and privacy controls:
Free tools Windows power users keep installed
One-click scans. No signup required.
- Change the email address associated with the account.
- Change the password.
- Change the method used to receive or generate security codes.
- Review the government services used with the account.
- Delete the One Login account.
Changing an account detail does not automatically alter records held by the government service you previously used. That service may have its own profile, contact details and account-recovery process.
Best Value
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
If you cannot sign in
- Start from the official GOV.UK service you were trying to use rather than an old bookmark or a message link.
- Use the current One Login sign-in and troubleshooting guidance for password, security-code or app problems.
- Check whether you still control the registered email address and phone used for authentication.
- Contact the One Login team through the official GOV.UK contact route if the account itself is inaccessible.
- If the service offers another access method, use it; the referring service controls the final access decision.
App, passkey and service coverage instructions can change. Follow the current GOV.UK guidance instead of relying on screenshots or instructions saved from an earlier journey.
Helping someone else use One Login
A trusted person may help another user create an account and complete identity steps. Help should remain assistance, not substitution: the account holder should provide their own information, hold their own identity document where possible and make the required declarations.
Current helper guidance covers boundaries for acting on another person’s behalf, including passkeys, signing out before lending a phone and handling saved digital documents. Before handing over a device, sign out of One Login and remove any saved documents or photos that the other person should not be able to access. Do not save another person’s passkey in your own account or leave their session open.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchSecurity and scam precautions
- Open GOV.UK by typing the address yourself or using a trusted bookmark when a message asks you to sign in.
- Do not disclose passwords, one-time security codes or passkeys to a caller or message sender.
- Be cautious of unexpected One Login messages, urgent requests and links asking for identity documents.
- If you suspect a message is a scam or your account may be compromised, stop using the link and contact One Login through the official route.
- Use a device lock and keep the operating system and official app updated.
One Login staff and the referring service should not need you to send a password or security code by email. Treat an unexpected request for those credentials as suspicious.
Quick Recap
Choosing the right route: a quick decision guide
| Your situation | Most practical next step | Important limitation |
|---|---|---|
| You have the requested document and a suitable smartphone | Use the GOV.UK ID Check or GOV.UK One Login app and follow the capture prompts. | The document, liveness and likeness checks must all meet the journey’s requirements. |
| You do not want or cannot use the app, but you have qualifying evidence | Choose security questions if the service presents that option. | This route is not available for every service or every user. |
| The app check failed once | Read the failure message, correct the specific issue and retry only if permitted. | Repeated attempts do not override the referring service’s rules. |
| You cannot access the account | Use current sign-in troubleshooting and the official One Login contact route. | The government service may require separate recovery steps. |
| You are helping another person | Follow helper guidance, keep the account holder in control and sign out before lending a device. | Do not retain their passkey, documents or active session. |
Key points to remember
- One Login is a shared sign-in and identity-check service, not a universal replacement for every GOV.UK account today.
- The available identity route depends on the service and your evidence.
- One Login may process identity, device and fraud-prevention data, but its retained account data is described as limited basic information.
- The referring government service receives the check result and matching information it needs, then makes the final access decision.
- For failures, account lockouts or suspicious messages, use current official guidance and contact routes rather than relying on old instructions.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
