Saudi Arabia

Nafath

Saudi Arabia's national digital identity authentication app. Face-scan login to Absher, Qiwa, Najiz, Muqeem, ZATCA, and 150+ Saudi banks and telecoms.

Overview

Nafath (iam.gov.sa) is Saudi Arabia's national digital identity and authentication app, operated by the National Information Center and the Unified National Access Platform. It is the biometric login layer that sits behind almost every Saudi government portal and most banks and telecoms: open Absher and the login asks for a Nafath face-scan; open Qiwa to sign a labour contract and the signature comes from Nafath; notarise a document on Najiz and the consent is given through Nafath; verify identity at a bank or telecom for a new account and the KYC step routes through Nafath. As of 2026 more than 150 platforms integrate Nafath as the identity provider.

Nafath supports two authentication modes. The push-and-approve mode sends a notification to the registered device when a login attempt is made elsewhere; the user opens the notification and approves with face-scan. This is the standard mode for routine logins. The active-authenticate mode is initiated from inside Nafath itself, generating a number that the user enters on the portal to confirm session ownership. Both modes complete in seconds and have replaced the password-and-OTP flows that previously dominated Saudi government portals.

Three points matter operationally. First, Nafath registration requires the user to first hold an active Absher account because the Nafath bind uses the Absher password as part of the initial enrolment. Second, the March 2026 update significantly improved face-recognition speed, removing the friction many older users complained about. Third, Nafath is not optional for most government transactions in 2026; password-based logins for Saudi government portals have been largely replaced by biometric authentication through Nafath, so any resident or citizen who has not enrolled is effectively locked out of large parts of the government stack. Confirm specific portal authentication requirements before assuming a non-Nafath workaround.

Services offered

  • Biometric login to government portals
  • Face-scan authentication
  • Digital contract signing
  • Bank and telecom KYC verification

How to access

  1. 1. Have an active Absher account

    Before installing Nafath, confirm your Absher account is active and you remember your Absher password. Nafath enrolment uses Absher credentials as part of the bind. New residents typically activate Absher first, then enrol in Nafath.

  2. 2. Install Nafath

    Download Nafath (نفاذ) from the App Store or Google Play. Publisher is the National Information Center. The app is free.

  3. 3. Activate the account

    Open the app, tap Activate, enter your Iqama or National ID number and Absher password, and complete the SMS OTP to the registered Saudi number. Create a 6-digit PIN to access your Nafath account.

  4. 4. Complete face verification

    Enable face verification by completing the biometric scan tied to your Iqama or National ID. Stand in good light, hold the phone at eye level, follow the on-screen prompts. The scan takes about 30 seconds. Once verified, future approvals are a one-tap face-scan.

  5. 5. Use Nafath for all portal logins

    On any Saudi government or partner platform, choose Login with Nafath. The portal pushes a notification to your device. Open the notification, approve with face-scan, return to the portal logged in. Some portals use the number-display mode where you enter a 2-digit code from Nafath into the portal.

FAQs

For most government portals as of 2026, yes. Password-based logins have been largely replaced by Nafath biometric authentication on Absher, Qiwa, Najiz, Muqeem, ZATCA, GOSI and Sehhaty. Some public-tier lookups still work without Nafath, but any personalised transaction requires it.

Yes. The app and all authentication usage are free. Only the underlying government or bank transaction fees apply, which are unrelated to Nafath.

Yes for daily logins, as long as the bound device has internet. The face-scan and PIN both work over any internet connection. The initial enrolment and any re-bind after a phone change require the registered Saudi SIM to be active and reachable; many residents who let the SIM lapse during long trips abroad find themselves locked out and need to wait until they return.

The Nafath authentication on the lost device is invalidated as soon as you remove it from trusted devices. To restore Nafath on a new phone, install the app, attempt activation, and the system will either guide you through re-binding from another trusted device or send you to a kiosk for in-person re-enrolment with your physical Iqama.

Yes. More than 150 Saudi platforms, including all the major banks (Al Rajhi, SNB, Riyad Bank, ANB, Bank AlBilad) and telecoms (STC, Mobily, Zain), use Nafath as the KYC and authentication layer. Opening a new bank account or activating a new SIM typically routes through a Nafath approval.

Push mode: the portal sends a notification to your device, you approve with face-scan. Number mode: Nafath shows a 2-digit number on the app and on the portal screen and you match them. Both achieve the same authentication; portals choose the mode that suits their flow.

Yes. Nafath signatures carry legal weight equivalent to a wet-ink signature under Saudi e-signature regulations. They are used on Qiwa employment contracts, Najiz notarised deeds, certain ZATCA filings, and a growing list of bank and telecom forms.

Try again in better lighting with no glasses or face covering. If repeated attempts fail, the app prompts a kiosk re-enrolment. Bring your physical Iqama or National ID to any National Information Center kiosk or designated bank channel (Al Rajhi, Riyad Bank, SNB, Bank AlBilad) for re-verification.

Skip the hassle

If you're stuck on a Nafath transaction, a typing centre can take it from here.

Get help