Suppliers looking to integrate NHS login should read our external interface specification
If you need to authenticate healthcare staff, rather than patients and carers, you need NHS Identity
NHS login is is the system for checking the identity of patients, and their carers, so that they can access medical records securely. This means that only the right people can see a patient's medical record.
NHS login is important in supporting infrastructure for many other personalised health and care 2020 programmes and could be used by other NHS Digital national programmes, local initiatives, and other government organisations.
At the moment, patients can access health records through a variety of local and national online systems. Different systems require users to verify their identity in different ways, which means gaining access can be complicated and time consuming.
A single identity verification system will make it simpler for patients to access digital records and services. As a result, they will be able to make better, more informed health and care decisions which will improve their health and therefore reduce demand on frontline services.
NHS login will also reduce burden and costs for local health and care organisations who would otherwise need to procure systems individually.
As a foundation for this work, we are working closely with system suppliers, clinicians and the public to develop identity standards, and we are carrying out local testing and trialling of different services to ensure both patient and system needs are met.
A person will be able to prove who they are using one of the following three ways:
If someone doesn’t want to take a video, there are other ways that we can compare their face to their photo ID – for example in person at their doctor’s surgery.
To make it more convenient for some people and to lower the burden on the NHS, we’re also exploring if a person can prove their identity using a trusted photo ID document at high street locations.
People who already use their GP’s online system, can sometimes use those registration details.
Once a person has proved who they are using their photo ID (either online or in person), they should not have to do this again. Even if they use their NHS login for other websites and apps.
A person needs to prove who they are to keep their NHS login secure.
We have published the identity verification and authentication standard for digital health and care services. It describes how and why a person should prove who they are before they use a health or care website or app.
It’s based on the government’s Identity proofing and verification of an individual good practice guide. All services that use our authentication and verification platform must meet NHS Digital’s standard.
A person can give someone else – such as a carer, friend or family member – permission to manage their care using an NHS login-controlled website or app. This is called delegated access. The person must prove who they are before they’re given delegated access.
People don’t need their NHS Number to set up an NHS login, but it could help us to find their health record if they do know it.
Read more about the technical specifications for the NHS login.