Nepal’s National ID download service has resumed, but this time with an additional layer of security.
Users attempting to access or download their National Identity Card are now required to enter an OTP sent to the mobile number they registered when applying for the card. The service had previously become unavailable after concerns were raised about the possibility of accessing National ID documents using only basic personal information.
Khoj Samachar Had Raised Security Concerns
On June 20, Khoj Samachar published a detailed video report and news article highlighting potential security risks within the National ID download system.
The report pointed out that users could access or download National Identity Cards without OTP verification, mobile verification, or any other secondary authentication layer. Khoj Samachar raised concerns that anyone who knew a person’s name, date of birth, and citizenship issuance date could potentially gain access to that individual’s National ID document.
The issue quickly gained attention online. The video report alone received more than 61,000 reactions, over 1,000 comments, and more than 2,300 shares across social media platforms.
The Service Became Unavailable The Following Day
A day after Khoj Samachar published its report, the National ID download service became unavailable.
At the time, the download page displayed a 404 (Page Not Found) error, while the download option also disappeared from Nepal’s Citizen Portal. However, authorities did not publicly explain why the service had been taken offline.
OTP Verification Has Now Been Added
With the service now restored, OTP-based verification has been introduced as an additional security measure.
In its earlier report, Khoj Samachar had recommended making OTP verification mandatory before allowing users to access or download National ID documents. The publication had also suggested limiting downloads to Nepal’s Nagarik App if immediate implementation of OTP authentication was not possible.
While the introduction of OTP verification is a positive step, there are still practical challenges that may affect some users. In many cases, the mobile number originally used during National ID registration may no longer be active, particularly for Nepalis working abroad or individuals who have changed their phone numbers.
For that reason, adding email-based verification alongside mobile OTP authentication could make the system both more secure and more accessible.
Security Must Remain A Priority
The National Identity Card system contains highly sensitive personal information and is directly linked to citizens’ identity and privacy. As digital public services continue to expand, ensuring strong security measures is just as important as improving convenience.
The addition of OTP verification represents a positive move toward strengthening data protection. Going forward, authorities may also consider introducing additional safeguards, including email verification and other authentication measures, to further enhance the security and reliability of the system.
