Quick answer: Aadhaar authentication is how a bank, government department or other approved agency confirms that you are the person who holds a particular Aadhaar number. The agency sends your Aadhaar number (or Virtual ID) with your details, an OTP, your fingerprint or iris, or a face scan to the Unique Identification Authority of India (UIDAI), which replies “yes” or “no”, or sends verified e-KYC details if you consent. You can see every authentication on your Aadhaar in your authentication history and lock your biometrics so they cannot be used without you.
What Aadhaar authentication is (and is not)
When you authenticate, a requesting agency submits your Aadhaar number together with the information you provide. UIDAI matches it against the record in its Central Identities Data Repository (CIDR) and returns a digitally signed answer.
An earlier version of this article said authentication is done “to keep the database up to date”. That is not correct. Authentication only checks your identity against existing records; it does not change them. Updating your name, address, mobile number or biometrics is a separate process, done at an Aadhaar centre or, for address and documents, online on myAadhaar.
Types of Aadhaar authentication
UIDAI describes these modes of authentication:
| Mode | What is checked | Typical use |
|---|---|---|
| Demographic | Your Aadhaar number with details such as name, date of birth or gender, matched against UIDAI’s records | Confirming that details you have given a service match UIDAI’s records |
| One-time PIN (OTP) | A time-limited OTP sent to the mobile number or email registered with Aadhaar | Online services, e-Aadhaar download, e-KYC on websites and apps |
| Biometric: fingerprint or iris | A live fingerprint or iris scan from a registered device | Ration shops, micro-ATMs, SIM KYC at stores, bank branches |
| Biometric: face | A live face scan, usually on a smartphone camera | Pensioners’ digital life certificates, Aadhaar app registration, EPFO UAN generation |
| Multi-factor | A combination of two or more of the above | Higher-risk transactions |
Yes/No authentication and e-KYC
Authentication can give two kinds of result:
- Yes/No authentication: UIDAI only confirms whether the details match. No personal data is shared with the agency.
- e-KYC authentication: with your consent, UIDAI also sends your name, address, date of birth, gender and photograph. According to UIDAI, e-KYC is done only with OTP and/or biometric authentication, never with demographic matching alone. Our explainer on Aadhaar e-KYC covers this in detail.
Your core biometrics (fingerprints and iris) are never shared with the agency in either case.
Face authentication is growing fast
Face authentication needs no fingerprint scanner, only a phone camera. In a release published through the Press Information Bureau in December 2025, UIDAI reported 28.29 crore face authentication transactions in November 2025, more than double the 12.04 crore in November 2024. Nearly 60% of pensioners’ digital life certificates that month used face authentication. See our guide to Jeevan Pramaan life certificates for how pensioners use it.
Where you will be asked to authenticate
- Government benefits: ration distribution, LPG subsidy (biometric Aadhaar authentication is required for subsidised LPG refills from 1 October 2026), scholarships and pensions. Aadhaar can be required here under Section 7 of the Aadhaar Act, but an alternative must be offered if authentication fails because of illness, injury, old age or technical problems.
- Banking: micro-ATMs and the Aadhaar Enabled Payment System (AePS), where you withdraw cash with a fingerprint. Read our guide to AePS for merchants and banking correspondents.
- Tax and PAN: the free instant e-PAN on the Income Tax e-filing portal is issued after Aadhaar OTP authentication.
- Rail tickets: since July 2025, Tatkal tickets on the IRCTC website and app can be booked only by Aadhaar-authenticated users, according to the Ministry of Railways.
- Voluntary services: bank accounts and mobile connections, where Aadhaar is one option among several.
The original article said many banks and the public distribution system were making Aadhaar authentication “mandatory”. For bank accounts that is no longer true: since the 2019 amendment, banks must offer other ways to complete KYC and cannot refuse service only because you do not use Aadhaar.
How to check your Aadhaar authentication history
Authentication history shows when your Aadhaar was used, which mode was used, which agency requested it and whether it succeeded. According to UIDAI’s FAQ, you can see records from the last six months, up to 50 at a time.
- Log in to the myAadhaar portal (myaadhaar.uidai.gov.in) with your Aadhaar number and an OTP sent to your registered mobile, or open the official Aadhaar app.
- Open the “Authentication History” option.
- Choose the authentication type (or all types) and a date range of up to six months.
- Review each entry: date and time, mode (OTP, biometric, demographic and so on), the requesting agency’s name and the response.
If you see an entry you do not recognise, contact the agency named in the record first. You can also report it to UIDAI on the 1947 helpline or at help@uidai.gov.in, and lock your biometrics straight away.
How to lock and unlock your biometrics
Biometric lock stops anyone from using your fingerprints, iris or face to authenticate, even if they have a copy of them. Your Aadhaar stays active for OTP-based services.
- Log in to myAadhaar or the Aadhaar app with your registered mobile number.
- Choose “Lock/Unlock Biometrics” and confirm the lock.
- When you need a biometric service, such as at a ration shop or bank, unlock temporarily in the same place. The unlock lasts only for a short period set by UIDAI or until the transaction is complete, and the lock then applies again.
If someone tries to use your locked biometrics, the transaction fails with error code 330, which UIDAI uses to show that biometrics are locked. You need a mobile number registered with Aadhaar to use this service; if you do not have one, update it at an Aadhaar centre.
Biometric lock is different from the full Aadhaar lock, which blocks all authentication, including OTP. Use the full lock only if you understand how to unlock it with your Virtual ID.
Frequently asked questions
Does Aadhaar authentication reveal my personal information?
A yes/no authentication reveals nothing except whether the details matched. e-KYC shares your name, address, date of birth, gender and photo, but only with your consent. Fingerprints and iris data are never shared.
What if my fingerprint does not work?
Fingerprints can fail because of age or manual work. Ask whether the agency accepts iris, face or OTP authentication. For government benefits, the law requires an alternative way to prove identity if authentication fails. If failures continue, update your biometrics at an Aadhaar centre; see our guide to common Aadhaar problems.
Can someone authenticate with only my Aadhaar number?
Not for OTP or biometric authentication. They would also need the OTP from your mobile or your live biometrics. Keep your OTPs private and lock your biometrics to reduce the risk.
Is a Virtual ID accepted for authentication?
Many services accept your 16-digit Virtual ID (VID) in place of the Aadhaar number. You can generate one on myAadhaar or by SMS to 1947.
This guide was checked in October 2026 against UIDAI’s pages and FAQs on authentication, authentication history and biometric lock, UIDAI’s December 2025 release on authentication volumes, and Ministry of Railways and Ministry of Petroleum and Natural Gas releases published through the Press Information Bureau.
