DigiLocker is a flagship cloud-based digital platform launched by the Government of India, under the Ministry of Electronics and IT, as part of the Digital India initiative.
It enables paperless governance by allowing citizens to securely store, access, and share official documents and certificates in digital format.
Key Takeaways
- DigiLocker documents have the same legal status as physical originals under Section 6A of the Information Technology Act, 2000, and Rule 9A of the Digital Locker Rules, 2016.
- SEBI integrates DigiLocker with depositories, mutual funds, and KRAs to streamline access to holding statements and help track unclaimed securities.
- Stockbrokers utilize DigiLocker for consent-based offline Aadhaar XML sharing, streamlining identity verification during Demat onboarding without retaining standing access.
- From April 2026, RBI guidelines require banks to route high-risk or anomalous transactions through DigiLocker-based verification as an additional layer beyond standard OTPs.
- Accounts receive 1 GB of free storage for uploaded files, alongside unlimited access to cryptographically signed "issued" documents pulled directly from source issuers.
What is DigiLocker?
Operated under the Ministry of Electronics and Information Technology (MeitY) as part of the Digital India initiative, DigiLocker connects citizens, issuers, and requesters via consent-based APIs. It segregates documents into two distinct operational classes:
- Issued documents: Pushed directly via API by government departments or educational bodies and cryptographically signed, carrying full statutory weight equivalent to physical originals (e.g., PAN, driving licence, vehicle registration, academic marksheets).
- Uploaded documents: Scanned files uploaded and self-signed by users. These function as self-attested personal records rather than officially verified government-issued documents.
Key Features of DigiLocker
- Legal Validity: Under Rule 9A of the Information Technology Rules, electronic documents available on DigiLocker are treated as legally equivalent to original physical documents.
- Consent-Based Sharing: Documents can be securely shared with third-party organisations, banks, or verification agencies only with the user's explicit consent, preserving privacy and data security.
- eSign Facility: The platform includes an integrated eSign service that lets users sign documents digitally.
Issued vs Uploaded Documents
|
Category |
How It Gets There |
Legal Weight |
Examples |
|
Issued documents |
Pushed directly by the issuing authority via API, digitally signed |
Treated at par with the original physical document |
Aadhaar, PAN, driving licence, vehicle Registration Certificate (RC), marksheets, ITR acknowledgement |
|
Uploaded documents |
Scanned and self-uploaded by the user, then e-signed |
Self-attested; useful for personal storage but not automatically equivalent to an original |
Old certificates, personal records, scanned receipts |
Benefits of DigiLocker
-
Eliminates Physical Clutter: Removes the need to carry physical ID cards and papers by storing official records securely in the cloud.
-
Instant Legal Acceptance: Documents fetched as "issued" are legally equivalent to physical originals under Rule 9A of the Digital Locker Rules, 2016.
-
Streamlined Onboarding: Simplifies digital KYC processes for banks, stockbrokers, and mutual fund platforms via consent-based data sharing.
-
Enhanced Fraud Protection: Provides an extra verification layer for high-risk banking transactions and mitigates the risk of document loss or damage.
Eligibility, Documents Required for DigiLocker
-
Active mobile number for SMS authentication and initial sign-up.
-
Active Aadhaar number linked to your mobile number to unlock automated document pulling from government issuers (PAN, driving licence, marksheets, etc.).
-
Identity and Tax: Aadhaar card, PAN card.
-
Transport: Driving licence, vehicle registration certificate (RC), vehicle insurance papers.
-
Education: Class 10 and 12 marksheets and pass certificates, university degree certificates, migration certificates.
-
Financial and Compliance: Income tax return (ITR) acknowledgements, policy documents from insurance providers.
-
Personal Storage: Any personal PDF, JPEG, or PNG files (up to 1 GB total) that you choose to upload and self-sign.
How to set up DigiLocker
-
Download or Access: Install the DigiLocker mobile app from official app stores or visit the official website (digilocker.gov.in).
-
Create Account: Click on Sign Up, enter your mobile number, and verify it via the incoming OTP.
-
Set Security PIN: Create a secure 6-digit PIN to protect your account access.
-
Link Aadhaar: Enter your Aadhaar number to integrate identity verification and enable document fetching.
-
Search and Pull: Browse participating issuer departments to pull and save your official "issued" documents directly into your locker.
Where can You use DigiLocker?
Under Rule 9A of the Digital Locker Rules, 2016 (backed by Section 6A of the Information Technology Act, 2000), issued documents fetched directly through DigiLocker carry the same legal validity as physical originals across India.
Specific sectors, authorities, and institutions legally mandated or officially notified to accept DigiLocker documents include:
1. Transport & Traffic Enforcement
-
State Transport Departments: State and Union Territory transport departments across India legally accept digital Driving Licences (DL) and Vehicle Registration Certificates (RC) presented via DigiLocker or mParivahan under Ministry of Road Transport and Highways (MoRTH) guidelines. Traffic police and enforcement agencies cannot penalise you for lacking physical cards if valid issued versions are pulled in-app.
2. Travel & Transit Security
-
Indian Railways: The Ministry of Railways formally recognises digital Aadhaar and Driving Licences presented from the "Issued Documents" section of DigiLocker as valid photo ID proof for train travel (per Railway Commercial Circular No. 33).
-
Airports & Civil Aviation: The Bureau of Civil Aviation Security (BCAS) permits the acceptance of digital identity documents from DigiLocker for security verification and entry screening for departing air passengers.
3. Banking, Finance, and Investments (BFSI)
-
Banks & NBFCs: The Reserve Bank of India (RBI) amended its Master Directions on KYC to allow banks and financial institutions to accept DigiLocker documents explicitly. Furthermore, the Ministry of Finance integrated DigiLocker under the Prevention of Money Laundering Act (PMLA) rules.
-
Stockbrokers & Mutual Funds: The Securities and Exchange Board of India (SEBI) permits SEBI-registered intermediaries (brokers, depositories, and KYC Registration Agencies) to accept Officially Valid Documents (OVDs) via DigiLocker for digital onboarding and e-KYC.
4. Education & Employment
-
Educational Institutions: Designated by the Ministry of Education (formerly MHRD) as the National Academic Depository (NAD), DigiLocker marksheets, passing certificates, and degrees are officially accepted by central and state educational boards, universities, and technical institutions for admissions and verifications.
-
Foreign Universities & Employers: Through integrations like eSanad (via the Ministry of External Affairs), foreign institutions can securely verify academic credentials on DigiLocker.
5. Government Services & Utilities
-
State and Central Departments: Various e-District portals, welfare schemes (such as Ayushman Bharat / PM-JAY health cards), public distribution systems (PDS / Ration cards), and municipal bodies accept DigiLocker-pulled certificates (birth, caste, income, and domicile).
-
Telecom Operators: The Department of Telecommunications (DoT) allows DigiLocker-backed self-KYC for issuing new mobile SIM connections.
Is DigiLocker Safe?
-
Government Backing: Built under the Digital India initiative by the Ministry of Electronics and Information Technology (MeitY).
-
Robust Encryption: Employs 256-bit SSL encryption for data transmission and cloud storage security.
-
Multi-Factor Security: Protected by mobile OTP verification, a secure user-defined PIN, and biometric login options (fingerprint or Face ID).
-
Controlled Access: Data sharing requires explicit, time-bound, and granular user consent; platforms cannot retain standing access to your locker.
The Legal Basis: Why DigiLocker Documents are Valid
DigiLocker documents are legally treated the same as physical papers because of a specific government rule: Rule 9A of the Digital Locker Rules, 2016 (created under the Information Technology Act, 2000).
This law forces government and statutory bodies to accept official documents straight from your locker instead of demanding notarised copies.
DigiLocker’s Role in SEBI-Regulated KYC and the Securities Market
While DigiLocker itself is not a SEBI platform, SEBI has actively built it into securities-market processes in recent years:
- Demat and trading account onboarding
Many brokers now offer Aadhaar-based e-KYC where logging into DigiLocker fetches a masked Aadhaar for real-time proof-of-identity and proof-of-address verification, replacing manual document upload and review. - Consent-based, one-time access
When a broker requests DigiLocker access during onboarding, the investor sees exactly which documents are being requested and approves each pull individually; the broker does not retain standing access to the investor’s locker afterwards. - Holdings visibility and unclaimed assets
SEBI has directed mutual fund Asset Management Companies (AMCs), their registrars and recognised depositories to enable investors to access their mutual fund and demat holding statements through DigiLocker. The framework also allows users to appoint Data Access Nominees, who are notified of the account holder’s demise and can access the DigiLocker account after identity authentication. This initiative aims to help families identify investments and reduce unclaimed assets in the securities market. - KYC Registration Agency (KRA) alignment
Since DigiLocker-based Aadhaar e-KYC feeds into the same KRA database that brokers, depositories, and mutual funds already check, an investor verified once generally does not need to repeat full KYC with every new intermediary.
DigiLocker and Income Tax Filing
DigiLocker is also woven into tax compliance, even though it is not an Income Tax Department platform itself:
PAN card, Form 16, and ITR acknowledgement/V are among the documents many taxpayers store or fetch through DigiLocker for quick reference and submission to third parties such as lenders.
Aadhaar linked through DigiLocker can support e-verification of income tax returns, one of the accepted methods for completing the ITR filing process without a physical signature.
When applying for loans, visas, or other services that ask for income proof, a DigiLocker-issued document generally satisfies the requirement without needing a fresh attested copy.
Conclusion
DigiLocker has moved well beyond being a convenient place to store a driving licence. It now sits at the intersection of digital governance, KYC compliance for SEBI-regulated intermediaries, income tax processes, and as of April 2026, banking fraud prevention.
Because its documents carry statutory legal recognition, and because SEBI, RBI, and the Income Tax Department have each built workflows around it, understanding how DigiLocker works is no longer optional trivia for a digitally active investor; it is part of how identity, holdings, and transactions get verified in 2026.




