LuxTrust will remain the main provider of digital credentials in Luxembourg until 2026

LuxTrust S.A., founded in 2005, will remain the main provider of digital credentials and authentication services in Luxembourg until at least 2026. The last contract with LuxTrust was awarded by the Ministry of Economy in 2022 for a period of three years. The government decided not to look for an alternative provider, citing high security and data sovereignty, as the entire LuxTrust infrastructure is located in Luxembourg and is under the strict control of the national security authority ILNAS.

While some believe that this solution creates dependency on a single provider, the government emphasises that this is necessary to ensure data security. Electronic Identity Documents (eIDs) in Luxembourg are equipped with highly secure chips and the certificates used for digital signatures are renewed every 5 years. Discussions are underway to extend the validity of certificates to 10 years in order to reduce the frequency of renewal and increase convenience for users.

LuxTrust strictly complies with Luxembourg's legislation on services de confiance, which guarantees continuity of services even in the event of technical failures or changes of provider. This ensures user protection and data security in any situation. In January 2025, LuxTrust experienced technical problems due to a software failure, but all systems were quickly restored.

Luxembourg also supports compatibility of its digital credentials with eIDAS, allowing users to log into government services via MyGuichet.lu using credentials from 22 EU countries, including all of Luxembourg's neighbours. However, eIDAS currently only covers authentication and not qualified electronic signatures. With the adoption of the revised eIDAS Regulation, it is expected that all European digital wallets will become fully interoperable for authentication and electronic signature.