Digital Identity: LuxTrust for your administrative and banking needs

You arrive in Luxembourg, open a bank account, try to log in to MyGuichet.lu, and suddenly you’re asked for LuxTrust. This is often when things get complicated: user ID, password, OTP code, activation on a smartphone or via a device like the Scan.

In Luxembourg, verifying your digital identity via the LuxTrust system secures your transactions: logging into online banking, confirming transactions, accessing certain online public services, and signing documents with a qualified electronic signature.

Here you’ll find practical explanations about the uses of digital identity in Luxembourg, the available products, the steps to obtain and activate it, and how to avoid common pitfalls like phishing.

What exactly is LuxTrust used for?

Log in and confirm your online banking or payment transactions

LuxTrust is a digital identity verification system that allows youto securely access online services, including your online banking to confirm your banking transactions. In practice, when you log in to your online banking portal, you use your LuxTrust credentials to confirm your identity.

Similarly, when shopping online, the validation of your purchase via your credit card will be secured by confirmation through LuxTrust.

Accessing online public services (e.g., MyGuichet.lu) and signing certain forms

LuxTrust is also used to access public services, notably MyGuichet.lu, Luxembourg’s online platform for administrative procedures. To log in, you’ll need a digital identity verification tool such as LuxTrust to fill out and sign certain forms, such as your tax returns, for example.

Sign documents electronically

LuxTrust validates your electronic signature, which has the same legal validity as a handwritten signature. This allows you to complete certain procedures remotely, without having to print, sign by hand, and return documents.

How it works (what you use every day)

Security elements: User ID, password/PIN, and OTP (One-Time Password)

On a daily basis, LuxTrust works with login credentials and a temporary code:

• User ID: your LuxTrust ID.
• Password: used with certain devices (e.g., Scan), or a PIN if you use a smart card (e.g., SmartCard).
• OTP (One-Time Password): a single-use code generated by your LuxTrust Scan device, required to confirm a login or transaction.

This combination is central to the process: even if someone knows your User ID and password, they still lack the OTP generated on your digital identity security device.

The typical process: select the device → enter credentials → generate and enter the OTP

From the user’s perspective, the process for validating your digital identity is as follows:

1. You log in to your bank (or the service’s app/website).
2. You select your LuxTrust device from the available options.
3. You enter your User ID and password, or your PIN if you are using a smart card.
4. You generate the OTP code via your device and enter it to finalize access or validate the transaction.

On a site like MyGuichet.lu, the process is similar: you log in, then confirm the requested action using the generated OTP code or facial recognition via your smartphone if you choose that option.

What digital identity products are available for individuals?

The LuxTrust Mobile app

LuxTrust offers the LuxTrust Mobile app, which you can activate directly on your smartphone for immediate validation. When you perform an online action (bank login, confirming an online purchase, administrative procedure, signature):

1. You log in to the service (bank or MyGuichet.lu
2. You select LuxTrust as your authentication method
3. A notification is sent to your smartphone
4. Open the LuxTrust Mobile app
5. You verify the details of the transaction
6. You confirm your identity:
   • via fingerprint
   • facial recognition
   • or PIN code

Once validated, the action is immediately authorized.

The LuxTrust Scan device

LuxTrust Scan is a small physical device that generates security codes. To use it, first enter your User ID and password on the website or app you want to access.
Then press your Scan to generate a one-time code, which you enter to confirm your login or validate a transaction.
This way, even if someone knows your login credentials, they won’t be able to log in without the Scan.
It’s a secure solution that works independently of your smartphone.

SmartCard

The LuxTrust SmartCard is a smart card that stores your digital identity. To use it, insert the card into a reader connected to your computer. Enter your PIN to identify yourself or validate a transaction.
The card automatically generates the codes needed to secure your online transactions or sign documents electronically. It is a practical solution, especially for administrative or professional tasks performed on a computer.

Luxembourg ID Card (eID)

If you have a Luxembourg identity card, you can activate the eID for electronic authentication using the chip that contains the authentication certificates and your signature. This will allow you to log in to public services and sign documents directly.

The eID is not a LuxTrust product. This device is useful for your administrative procedures.

How to obtain your LuxTrust identity

To obtain a LuxTrust identity, choose the appropriate product on the LuxTrust website or through your bank.

Beware of phishing

Also, do not respond to messages asking you to reactivate your certificate or urging you to click on a link that redirects you to a fake website designed to steal your login credentials or bank details, or to make you approve a malicious transaction.

If you have clicked on a link and submitted data, contact your bank immediately and LuxTrust customer service at +352 24 550 550, or by email at questions@luxtrust.lu.