What is Aadhaar Offline Verification: Paperless e-KYC Complete process of XML download, QR code scan and OTP verification

The system of ‘Aadhaar Paperless Offline e-KYC’ has been implemented by the Unique Identification Authority of India (UIDAI) with the aim of strengthening the privacy and data security of citizens. In normal online e-KYC, the service provider (such as a telecom company, bank or hotel) directly connects to UIDAI’s central server and verifies the identity of the individual through OTP or fingerprint/iris biometrics. In this process the agency has online dependency at the time of verification.

In contrast, Aadhaar offline verification is a completely contactless and secure digital technology. In this, there is no need for the citizen to share his key identification numbers publicly. Under this, digitally signed data packets—such as password-protected XML files or secure QR codes—are used by UIDAI. The verifying entity can verify the identity, name, address, photo and date of birth on its own local system without direct connection to UIDAI servers (without any live internet database query).

The step-by-step procedure to download a password-protected ZIP file from the UIDAI portal is as follows:

1. UIDAI official portal myaadhaar.uidai.gov.in Go to.

2. ‘Login’ Click on the button, enter your identification details and captcha code.

3. Complete the login by entering the OTP received on your registered mobile number.

4. Scroll down in the dashboard and ‘Offline e-KYC’ Click on service option.

5. Create Share Code: You will be asked to enter a 4 digit secret code (such as 1234 or 4589) on the screen. This code will be the password of the zip file to be downloaded.

6. ‘Download’ Click on the button. A secure .zip file will be downloaded to your device.

7. Method of use: Whenever any service provider (agency) needs to provide the identity card, you can provide them this zip file and your 4 digit share code. The authorized software of the agency unzips the file through this code and verifies the data offline.

A large square on the Aadhaar card (printed letter, PVC card or e-Aadhaar download) Secure QR Code Is printed. It is not a simple text barcode, but consists of encrypted data and a 2048-bit digital signature digitally signed by UIDAI.

• Which app to scan with: UIDAI has launched the official Windows app (Aadhaar QR Code Reader) for its verification and for mobile users. mAadhaar App And Aadhaar QR Scanner Has made available.

• Method of Verification:

  
  

  1. The QR code printed on the base is scanned by opening the camera in the scanner device or app.

  2. The app locally verifies the validity of the signature with UIDAI’s digital key (Public Key).

  3. If the QR code is genuine, the citizen’s name, gender, date of birth, address and photo is displayed on the screen.

  4. This process does not require any OTP or fingerprint and is completed offline in a few seconds.

This question arises in the minds of many citizens that how is the authenticity of identity proved without live OTP or server connectivity. its technical basis Cryptographic Digital Signature (PKI – Public Key Infrastructure) Is:

• Data Integrity: When UIDAI generates an XML file or QR code, it digitally stamps that data with its private cryptographic key.

• Tamper-Proof (Impossible to Tamper): If a person tries to change the name or date of birth within the XML file or QR code, the digital signature is broken and the offline reader software immediately issues an alert of “Invalid Signature / Tampered Data”.

• Privacy Protection: Instead of directly displaying the identification numbers in this file, a secure reference ID or masked form is used instead, completely eliminating the risk of misuse of identification details.

• No need to share biometric data: There is no fear of fingerprint or iris scan being leaked.

• Freedom from the problem of server being down: Sometimes the work stops due to slow network or non-receipt of OTP; In offline mode, work is done immediately at the local level.

• Full legal recognition: Offline e-KYC has full legal recognition as Proof of Identity (PoI) and Proof of Address (PoA) by banks, NBFCs, telecom companies, Passport Seva Kendras and private institutions under the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act and related rules.

• Citizen’s Control: The user himself decides with whom he wants to share his share code and data, thereby maintaining consumer autonomy over the data.